[Systems] runaway process on sunjammer?

[Sascha Silbe]

On Thu, Oct 15, 2009 at 08:06:10PM -0500, David Farning wrote:

> System cpu usage jumped a couple hours ago.  Atop says root is running 
> sudo.
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root      9644 93.1  0.0  67868  2504 pts/10   R    Oct15 753:23 sudo 
/srv/www-ole/sites/library/content/Siyavula/hard-links.sh

Looks like it was invoked with an invalid TTY (how?) and didn't like it:

--- SIGTTOU (Stopped (tty output)) @ 0 (0) ---
rt_sigreturn(0x16)                      = -1 EINTR (Interrupted system 
call)
ioctl(7, SNDCTL_TMR_TIMEBASE or TCGETS, {B9600 opost isig -icanon -echo 
...}) = 0
ioctl(7, SNDCTL_TMR_CONTINUE or TCSETSF, {B9600 opost isig icanon echo 
...}) = ? ERESTARTSYS (To be restarted)
--- SIGTTOU (Stopped (tty output)) @ 0 (0) ---
rt_sigreturn(0x16)                      = -1 EINTR (Interrupted system 
call)
ioctl(7, SNDCTL_TMR_TIMEBASE or TCGETS, {B9600 opost isig -icanon -echo 
...}) = 0
ioctl(7, SNDCTL_TMR_CONTINUE or TCSETSF, {B9600 opost isig icanon echo 
...}) = ? ERESTARTSYS (To be restarted)


That would also explain why there's no log entry: It probably hung while 
trying to read the password, so before logging.

The shell script doesn't exist anymore. sudo was run by user "ole", 
working directory /srv/www-ole/BACKUPS/qa.library.ole.org/files/.

I've left the process running just in case anyone wants to do further 
analysis, but renice'd it.

CU Sascha

-- 
http://sascha.silbe.org/
http://www.infra-silbe.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 489 bytes
Desc: Digital signature
Url : http://lists.sugarlabs.org/private/systems/attachments/20091016/7c0fb118/attachment.pgp