Re: "Text file busy"

From: Colin Faber (cfaber@fpsn.net)
Date: 07/23/02 

Date: Tue, 23 Jul 2002 02:04:21 -0600
From: Colin Faber <cfaber@fpsn.net>
To: Evren Yurtesen <yurtesen@ispro.net.tr>

Common cause: Samba

Normally you'll see this when you've got someone hacking up a file
with something like wordpad etc. Which may set the lock but fails to
remove it, thus samba keeps the lock in tact and you receive that
error.

Evren Yurtesen wrote:
>
> if a program is running and locked the file.
> I believe you can see which file is open by which process
> with fstat command
>
> On Tue, 23 Jul 2002, Brett Glass wrote:
>
> > A FreeBSD server belonging to a client of mine has begun to report "Text
> > file busy" in response to common commands. I can't see anything unusual
> > on the surface, but am concerned that the server may have been
> > compromised anyway (a rootkit could have been installed) and that this is
> > a symptom. What mechanism generates this message? And does it suggest
> > that the machine may have been rooted?
> >
> > --Brett Glass
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> >
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message 

-- 
Colin Faber
(303) 736-5160
fpsn.net, Inc.
* Black holes are where God divided by zero. *
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: Gone in 60 seconds
    ... SO a lock buys you time from opportunist theives. ... Kryptonite takes the security of its customers' property very seriously ... cutters are common tools used by thieves. ... secured with a New York Fahgettaboudit chain. ...
    (uk.rec.cycling)
  • Re: FAT, NTFS, CIFS and DOS attributes
    ... fetching and setting this stuff is _really_ common, ... Obviously it is racy when dealt with from user space, ... having a Samba LSM module to avoid these races. ...
    (Linux-Kernel)
  • Re: Lockless uidinfo.
    ... contention in the common case. ... uihold- refcount goes to 1 ... on the uid while it drops the uidinfo lock to acquire the table lock. ...
    (freebsd-arch)
  • Re: Lockless uidinfo.
    ... contention in the common case. ... uihold- refcount goes to 1 ... on the uid while it drops the uidinfo lock to acquire the table lock. ...
    (freebsd-arch)
  • RE: [SLE] SuSE 8.2 & Samba 2.2.7a-SuSE system crash
    ... SuSE 8.2 & Samba 2.2.7a-SuSE system crash ... The linux machine crashes with caps lock and scroll ... lock flashing when transfering files to or from it, ...
    (SuSE)