RE : sophie HUP/TERM issue

"Patrice Blot" <[email protected]> Tue, 27 Apr 2004 10:11:38 +0200
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
I had a LOT of problem with 3.04. I downgraded to 1.44

Patrice Blot
FC-NET
 


> -----Message d'origine-----
> De : Sascha Lucas [mailto:[email protected]] 
> Envoyé : lundi 26 avril 2004 14:16
> À : [email protected]
> Objet : [vtools] sophie HUP/TERM issue
> 
> 
> Hi list,
> 
> first of all my versions:
>   - OS     = SuSE 8.2 (glibc-2.3.2)
>   - sophie = 3.04RC1
>   - sophos = 3.81
> 
> I just want to know if I'm doing something wrong or what 
> piece should be fixed (sophos, sophie, OS, user :-) ).
> 
> a typical process-picture is this:
> 
> $ ps -Af f | grep sophie | grep -v grep
> root   17080	 1 0 13:55 ? S 0:00 /usr/local/sbin/sophie -D
> sophie 17081 17080 1 13:55 ? S 0:00  \_ 
> /usr/local/sbin/sophie -D sophie 17084 17080 0 13:55 ? S 0:00 
>  \_ /usr/local/sbin/sophie -D
> 
> where the PID 14160 ist the parent and the others running as 
> user "sophie" are the childs.
> 
> Problem #1: TERM with libc6 and libc6.glibc.2.2 (testet with 3.77b 
> and 3.81)
> 
> The parent terminates put childs stay and get new parent (PID 1)
> 
> $ ps -Af f | grep sophie | grep -v grep
> sophie 17081     1 1 13:55 ? S 0:00  \_ /usr/local/sbin/sophie -D
> sophie 17084     1 0 13:55 ? S 0:00  \_ /usr/local/sbin/sophie -D
> 
> Problem #2: same as #1 but with KILL
> 
> Problem #3: HUP with libc6.glibc.2.2
> 
> A new child 17122 running as root appaers
> 
> $ kill -HUP 17080
> $ ps -Af f | grep sophie | grep -v grep
> root   17080	 1 1 13:55 ? R 0:01 /usr/local/sbin/sophie -D
> sophie 17081 17080 0 13:55 ? S 0:00  \_ 
> /usr/local/sbin/sophie -D sophie 17084 17080 0 13:55 ? S 0:00 
>  \_ /usr/local/sbin/sophie -D
> root   17122 17080 0 13:56 ? S 0:00  \_ /usr/local/sbin/sophie -D
> 
> Thanks Sascha.
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
>