Koozali.org: home of the SME Server

rkhunter: process using deleted files

Offline hjnvejlen

  • **
  • 25
  • +0/-0
rkhunter: process using deleted files
« on: June 24, 2008, 11:19:50 PM »
I have during the last 2 weeks or so received messages from RKHunter about:

Warning: The following processes are using deleted files:
         Process: (deleted)    PID: 3122    File: /usr/bin/perl.#prelink#
         Process: (deleted)    PID: 4319    File: /usr/bin/perl.#prelink#
         Process: (deleted)    PID: 4550    File: /usr/bin/perl.#prelink#

My problem is that I'm not sure what the real problem is and what I can do to solve it.

In my opinion it may mean either of these scenarios:

a process is wanting to use a file which has been deleted. This can be a problem since that process can't run correct.

or

a process is accessing a file which is supposed to be deleted. But on the other hand I haven't heard that Linux can access deleted files??

As I prefer to have as few warnings from my system, and I don't like to receive warnings that I don't understand I appriciate some help :-)

Offline mrjhb3

  • *
  • 1,188
  • +0/-0
    • John Bennett Services
Re: rkhunter: process using deleted files
« Reply #1 on: June 25, 2008, 02:56:21 AM »
Check the bugtracker, there is already an issue opened about this.

John
......