[leglug-users] mysql shell ??!

[Chady Kassouf]

On 6/19/07, Naim Abu Darwish <naim.abu.darwish at gmail.com> wrote:
>
> hello,
> I have a machine that i use for testing, putting all sorts of stuff on
> before moving to production enviroment. Looking through log files the other
> day, i found this in /var/log/mysql.log ::
>
> /bin/sh: root: command not found
> /bin/sh: root: command not found
> /bin/sh: root: command not found
> /bin/sh: root: command not found
>
> Something is trying to use mysql user to get a shell, something that
> should not have a shell.


I don't think it's something trying to use the user for a shell, more than
something trying to run a command called: "root" and not finding it.

the error messages of the shell are of the type:
<program>: <command>: <reason>

so it means that program "/bin/sh" was trying to run command "root" and
failed with reason "command not found"

I think it should be some sort of script that is building a  command line
and running it, but failing to build it correctly ... now the problem is
trying to identify the script that's doing that.

try to compare the log entries with the kernel messages to try and match the
events to see what's trying to run at that exact moment...

Hope this helps

-- 
Chady 'Leviathan' Kassouf
http://chady.net/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.leglug.org/pipermail/leglug-users/attachments/20070619/3f8af9c7/attachment.htm