owl-users - Re: lsof trouble

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Thu, 7 Apr 2005 02:19:32 +0400
From: "(GalaxyMaster)" <galaxy@...nwall.com>
To: owl-users@...ts.openwall.com
Subject: Re: lsof trouble

Hello,

On Wed, Apr 06, 2005 at 03:32:58PM +0200, Tchesmeli serge wrote:

> Since we use ow patched kernel, this script doesn't work no more in user 
> monitor (but still work in root user). In "monitor" user, lsof work but never 
> see us "deleted" file.
> 
> Is there a solution, or this is an OW bug?

It's not a bug. I bet you have turned on a "restricted proc" option in your kernel
configuration. To make your script working just add the monitor user to the proc
group (its gid is 19 in the standard Owl setup). You can accomplish that by
using "usermod -G proc monitor".

> Thanks

--
(GM)