Announcement

Collapse
No announcement yet.

Secuirty Question About Anacron (Solved)

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
    #1

    Secuirty Question About Anacron (Solved)

    I've been reading up on network security in Linux and one of the main items to monitor, according to the posts I read, is your system's logs (Syslog). So, I thought I would do that this morning and watch what happens after a fresh boot. Everything looked normal except for the below entry that I captured:

    Process Message
    Anacron[5337] Job "cron.daily" terminated (exit status: 1) (mailing output)
    syslogd 1.4.1 # 21 ubuntu 3 restart
    Anacron [5337] normal exit

    Immediately after this, the entire syslog that was recorded during bootup and for about 5 minutes after bootup was complete - was deleted. So, fearing a security problem, I opened the anacron config file and commented out every item so that no process could run.

    Was this a normal process or have I been compromised ?

    Mike
    sudo make me rich<br /><br />Kubuntu Gutsy 7.10<br />KDE 3.5<br />Compaq Presario 5000<br />Intel Celeron 1.2 Ghz<br />512 Ram, Riva TNT2 Video Card<br />All the above hardware is 7 year old junk but<br />Linux runs great on it.&nbsp; :&gt<br />Ham Radio Rules
    Tags: None
    • Top
    • Bottom
    #2
    Re: Secuirty Question About Anacron

    http://anacron.sourceforge.net/

    http://en.wikipedia.org/wiki/Anacron
    • Top
    • Bottom

    Comment

      #3
      Re: Secuirty Question About Anacron

      Thanks but I have already read those. I understand what anacron is and what it is/can do. However, what does "(mailing output)" mean? What is it mailing? To whom is it mailing this data?
      sudo make me rich<br /><br />Kubuntu Gutsy 7.10<br />KDE 3.5<br />Compaq Presario 5000<br />Intel Celeron 1.2 Ghz<br />512 Ram, Riva TNT2 Video Card<br />All the above hardware is 7 year old junk but<br />Linux runs great on it.&nbsp; :&gt<br />Ham Radio Rules
      • Top
      • Bottom

      Comment

        #4
        Re: Secuirty Question About Anacron

        Don't know if this will help answer. Couldn't find much else.

        http://ubuntuforums.org/showthread.php?t=683795
        • Top
        • Bottom

        Comment

          #5
          Re: Secuirty Question About Anacron

          Well, that may be exactly what is going on. I'll check the log tonight when I get home. Thanks for the post.

          Mike
          sudo make me rich<br /><br />Kubuntu Gutsy 7.10<br />KDE 3.5<br />Compaq Presario 5000<br />Intel Celeron 1.2 Ghz<br />512 Ram, Riva TNT2 Video Card<br />All the above hardware is 7 year old junk but<br />Linux runs great on it.&nbsp; :&gt<br />Ham Radio Rules
          • Top
          • Bottom

          Comment

            #6
            Re: Secuirty Question About Anacron

            Sorry I don't know much more. Just noticed no one was responding. Wanted to give some direction if any.
            • Top
            • Bottom

            Comment

              #7
              Re: Secuirty Question About Anacron

              Immediately after this, the entire syslog that was recorded during bootup and for about 5 minutes after bootup was complete - was deleted.
              Logrotate
              Logs… Any Linux system will generate many log files by default, containing various information about the operation of the system (normal actions, debugging information, security/authorization messages, web/email events, etc). If no rotation would occur on the various log files, then they will just grow bigger and bigger, filling up the space (on high traffic sites) but most importantly making it very difficult to find any information that we might be looking for in those log files. Fortunately this is handled in most Linux distributions by default and we don’t have anything special to do to set it up… if will function out of the box, rotating the log files by default.


              Normally, logrotate is run as a daily cron job.

              More of logrotate:

              Rotating Linux Log Files
              http://www.ducea.com/2006/06/06/rota...nux-log-files/

              Rotating Linux Log Files - Part 1: syslog
              http://www.ducea.com/2006/06/06/rota...part-1-syslog/

              Rotating Linux Log Files - Part 2: logrotate
              http://www.ducea.com/2006/06/06/rota...t-2-logrotate/


              (mailing output)
              Cron is sending mail to the root (to you).


              From apt-cache show cron
              Output from the commands is usually mailed to the system administrator
              (or to the user in question); you should probably install a mail system
              as well so that you can receive these messages.
              From apt-cache show mailx
              Description: A simple mail user agent
              mailx is the traditional command-line-mode mail user agent.
              Even if you don't use it it may be required by other programs.
              If you install mailx -> In the konsole:
              Code:
              mail
              Everyday (cron.daily), my kubuntu will mail to me:
              From root@ammu2500l.xxxxxx.xx Mon Mar 10 09:29:38 2008
              Return-path: <root@ammu2500l.xxxxxx.xx>
              Envelope-to: root@ammu2500l.xxxxxx.xx
              Delivery-date: Mon, 10 Mar 2008 09:29:38 +0200
              Received: from root by Ammu2500L.xxxxxx.xx with local (Exim 4.67)
              (envelope-from <root@ammu2500l.xxxxxx.xx>)
              id 1JYcS2-0008GQ-6p
              for root@ammu2500l.xxxxxx.xx; Mon, 10 Mar 2008 09:29:38 +0200
              From: Anacron <root@ammu2500l.xxxxxx.xx>
              To: root@ammu2500l.xxxxxx.xx
              Subject: Anacron job 'cron.daily' on Ammu2500L
              Message-Id: <E1JYcS2-0008GQ-6p@Ammu2500L.xxxxxx.xx>
              Date: Mon, 10 Mar 2008 09:29:38 +0200
              Status: RO

              /etc/cron.daily/disk_health:
              smartctl version 5.37 [i686-pc-linux-gnu] Copyright (C) 2002-6 Bruce Allen
              Home page is http://smartmontools.sourceforge.net/
              ...

              Earlier:
              Topic: How to keep my system up to date
              http://kubuntuforums.net/forums/inde...68826#msg68826
              Before you edit, BACKUP !

              Why there are dead links ?
              1. Thread: Please explain how to access old kubuntu forum posts
              2. Thread: Lost Information
              • Top
              • Bottom

              Comment

                #8
                Re: Secuirty Question About Anacron

                Thanks Rog!!
                • Top
                • Bottom

                Comment

                  #9
                  Re: Secuirty Question About Anacron

                  Excellent Rog! That should just about cover all my answers. Thanks! I'll mark this as solved.

                  sudo make me rich<br /><br />Kubuntu Gutsy 7.10<br />KDE 3.5<br />Compaq Presario 5000<br />Intel Celeron 1.2 Ghz<br />512 Ram, Riva TNT2 Video Card<br />All the above hardware is 7 year old junk but<br />Linux runs great on it.&nbsp; :&gt<br />Ham Radio Rules
                  • Top
                  • Bottom

                  Comment

                  Previous template Next
                  Working...
                  X