I think it's part of msec, it just checks for world writable files, changed
set-uid root files...basically anything that would tip you off that you've
had an intrusion onto your system.  I'm just a newbie though so I could be
wrong, but I set that cronjob to go off around 5am when i'm not awake, so it
doesn't matter either way.

    Adam

----- Original Message -----
From: "John Hendrickx" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, October 13, 2000 2:17 PM
Subject: [newbie] security.sh in crontab


> I've noticed that my machine starts accessing the disks and slows to
> a crawl at 12:00 midnight. I've traced the problem to a line in my
> /etc/crontab file:
>
> # Mandrake-Security : if you remove this comment, remove the next
> line too.
> 0 0 * * *    root    /etc/security/msec/cron-sh/security.sh
>
> My question is, what does this "security.sh" script do? It's a real
> pain in the ass, it effectively disables my computer for about 10
> minutes, but I'd like to know what it does first. It apparently
> searches my disks for certain files using "nice +19", which basically
> means "butt in and take over the whole machine". Can anyone tell me
> why this was installed in crontab, why it has to be so intrusive?
>
> __________________________________________________
> Do You Yahoo!?
> Get Yahoo! Mail - Free email you can access from anywhere!
> http://mail.yahoo.com/
>
>
>
>


Reply via email to