Another rkhunter question

Gene Heskett gene.heskett at verizon.net
Sun May 17 13:35:37 UTC 2009


Greetings all;

What is /dev/shm?

I've given up on rkhunter ever shutting up about the group and passwd files, 
but fussing about this is new.
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: Suspicious file types found in /dev:
         /dev/shm/sem.ADBE_REL_root: data
         /dev/shm/sem.ADBE_WritePrefs_root: data
         /dev/shm/sem.ADBE_ReadPrefs_root: data

And indeed, these files that I nuked friday are back:
[root at coyote linux-2.6.30-rc6]# ls -l /dev/shm
total 24
-r-------- 1 root root 67108904 2009-05-16 02:37 pulse-shm-3724332759
-rw-rw-rw- 1 root root       16 2009-05-16 20:33 sem.ADBE_ReadPrefs_root
-rw-rw-rw- 1 root root       16 2009-05-16 20:33 sem.ADBE_REL_root
-rw-rw-rw- 1 root root       16 2009-05-16 20:33 sem.ADBE_WritePrefs_root

Anything with 'pulse' in its name has been nuked by an 'rpm -e', and I 
actually have working audio now, so can someone please explain this?  A 67 
megabyte file in /dev for an shm device is for what purpose?

I looked at it with mc's hex viewer, and the first 10 or so megabytes are all 
$00.  I got tired of standing on the page down key.

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
... bacteriological warfare ... hard to believe we were once foolish
enough to play around with that.
		-- McCoy, "The Omega Glory", stardate unknown




More information about the fedora-list mailing list