Find Hidden Script

Andrew.Bridgeman at corusgroup.com Andrew.Bridgeman at corusgroup.com
Mon May 12 14:42:31 UTC 2008





Just found the script, someone had put it in the cron.weekly. Thanks for
the replies.

Regards

Andrew Bridgeman

|-----------------------------+-------------------------------------------|
|   Joey Prestia              |                                           |
|   <joey at linuxamd.com>       |                                           |
|   Sent by:                  |                                         To|
|   redhat-list-bounces at redhat|               General Red Hat Linux       |
|   .com                      |               discussion list             |
|                             |               <redhat-list at redhat.com>    |
|   12/05/2008 15:34          |                                         cc|
|                             |                                           |
|         Please respond to   |                                    Subject|
|       General Red Hat Linux |               Re: Find Hidden Script      |
|          discussion list    |                                           |
|      <redhat-list at redhat.com|                                           |
|                 >           |                                           |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|-----------------------------+-------------------------------------------|






Andrew.Bridgeman at corusgroup.com wrote:
>
>
> I am currently trying to track down a script that is run on one of our
> redhat machines which was put in place by someone no longer in the
company.
> The script basically runs a remove on a temp area but we now want to stop
> it doing this but unfortunately I cannot see it in any crons on the
> machine. I have looked at all the logical account for the crons to be
> running under but have had no luck. Does anyone know a good way of
finding
> out who and where on the machine it is running from.
>
> Regards
>
> Andrew Bridgeman
>
Did you look in the system cron directories /etc/cron.daily
/etc/cron.hourly and those directories referred to in the system crontab
file some sysadmins will add scripts to cron by just putting them in
the  system cron file in one of the directories that are pointed to by a
run-parts command and forget about them.

--
Joey Prestia


--
redhat-list mailing list
unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

**********************************************************************
This transmission is confidential and must not be used or disclosed by
anyone other than the intended recipient. Neither Tata Steel UK Limited nor
any of its subsidiaries can accept any responsibility for any use or
misuse of the transmission by anyone.

For address and company registration details of certain entities
within the Corus group of companies, please visit
http://www.corusgroup.com/entities

**********************************************************************





More information about the redhat-list mailing list