Re: Ghost cronjob

From	Mart van de Wege <mart@vdwege.eu>
Newsgroups	linux.debian.user
Subject	Re: Ghost cronjob
Date	2021-05-04 08:50 +0200
Message-ID	<CaX2y-7vR-1@gated-at.bofh.it> (permalink)
References	<CaASm-2Q4-5@gated-at.bofh.it> <CaJVD-80Z-3@gated-at.bofh.it> <CaLkK-x5-9@gated-at.bofh.it> <CaLE5-Db-3@gated-at.bofh.it> <CaMTw-1hV-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Mart van de Wege <mart@vdwege.eu> writes:

> Stefan Monnier <monnier@iro.umontreal.ca> writes:
>
>> Mart van de Wege [2021-05-03 20:11:25] wrote:
>>> Stefan Monnier <monnier@iro.umontreal.ca> writes:
>>>>> root@galahad:~# grep btrbk /etc/ -rl
>>>>
>>>> Have you `grep`d in `/var/` as well?
>>>> [ E.g. `/var/spool/crontabs` ]
>>>>
>>> Yep, nothing there, aside from the usual suspects (apt & dpkg files).
>>>
>>>>> And yet I find this in /var/log/btrbk.log:
>>>>>
>>>>> 2017-03-12T20:16:28+0100 startup v0.24.0 - - - - # btrbk command
>>>>> line client, version 0.24.0
>>>>
>>>> Any other mention of activity around that time in some other log file?
>>>>
>>>>
>>> Not that I can see. I am going to see what patching btrbk to log PPID
>>> shows up tonight.
>>
>> My usual "trick" is to log a full `ps --forest -ef`.
>
> Hmmm. If the PPID turns out to be ephemeral, then that is a good second
> option.
>
Nope, not ephemeral at all, it's PID 1. Since I don't have timers
running this job, apparently there's a zombie process somewhere?

Mart

-- 
"We will need a longer wall when the revolution comes."
--- AJS, quoting an uncertain source.

Thread

Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 09:10 +0200
  Re: Ghost cronjob <tomas@tuxteam.de> - 2021-05-03 09:20 +0200
    Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 10:00 +0200
      Re: Ghost cronjob <tomas@tuxteam.de> - 2021-05-03 11:30 +0200
        Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 12:10 +0200
  Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 09:20 +0200
  Re: Ghost cronjob David Wright <deblis@lionunicorn.co.uk> - 2021-05-03 16:50 +0200
    Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 18:40 +0200
  Re: Ghost cronjob Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-03 18:50 +0200
    Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 20:20 +0200
      Re: Ghost cronjob Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-03 20:40 +0200
        Re: Ghost cronjob <tomas@tuxteam.de> - 2021-05-03 21:40 +0200
        Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-03 22:00 +0200
          Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-04 08:50 +0200
            Re: Ghost cronjob Sven Hartge <sven@svenhartge.de> - 2021-05-04 15:50 +0200
              Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-04 17:10 +0200
                Re: Ghost cronjob David Wright <deblis@lionunicorn.co.uk> - 2021-05-04 18:10 +0200
                Re: Ghost cronjob Mart van de Wege <mart@vdwege.eu> - 2021-05-04 20:00 +0200
                Re: Ghost cronjob Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-04 21:30 +0200
                Re: Ghost cronjob David Wright <deblis@lionunicorn.co.uk> - 2021-05-05 04:50 +0200
                Re: Ghost cronjob l0f4r0@tuta.io - 2021-05-08 10:20 +0200
                Re: Ghost cronjob Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-08 12:00 +0200

csiph-web