Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am using chkroot to scan my system and it gave me permission denied error

/proc/23746/fd/0: Permission denied
/proc/23746/fd/1: Permission denied
/proc/23746/fd/2: Permission denied
/proc/23746/fd/3: Permission denied
/proc/23746/fd/5: Permission denied
/proc/23746/fd/8: Permission denied
/proc/23746/fd/11: Permission denied






[/proc/23746/fd]# ls -liah
/bin/ls: cannot read symbolic link 0: Permission denied
/bin/ls: cannot read symbolic link 1: Permission denied
/bin/ls: cannot read symbolic link 2: Permission denied
/bin/ls: cannot read symbolic link 3: Permission denied
/bin/ls: cannot read symbolic link 5: Permission denied
/bin/ls: cannot read symbolic link 8: Permission denied
/bin/ls: cannot read symbolic link 11: Permission denied
total 0
1489109001 dr-x------ 2 root root  0 Oct  8 10:46 ./
1489108994 dr-xr-xr-x 4 root root  0 Oct  8 10:46 ../
1489141760 lrwx------ 1 root root 64 Oct  8 10:48 0
1489141761 lrwx------ 1 root root 64 Oct  8 10:48 1
1489141771 lr-x------ 1 root root 64 Oct  8 10:48 11
1489141762 lrwx------ 1 root root 64 Oct  8 10:48 2
1489141763 lrwx------ 1 root root 64 Oct  8 10:48 3
1489141765 lr-x------ 1 root root 64 Oct  8 10:48 5
1489141768 l-wx------ 1 root root 64 Oct  8 10:48 8

What should i do fix them

share|improve this question
    
What makes you think that the permissions they have are incorrect? What user are you running this command as? –  EEAA Oct 8 '10 at 1:24
    
@ErikA I believe the OP thinks he/she may have been root'd but is, perhaps, reluctant to wipe the server and restore from backup. –  jscott Oct 8 '10 at 1:30
    
I was thinking if somehow i can remove those lines because it was showing the output and i was getting mail evrytime the cron job runs. i used command chkrootkit |grep infected. But those lines also come in email even if something is not infected so i was thining if i can fix those issues and get email only if something is infceted –  John Oct 8 '10 at 1:41
    
@jscott, ahh I see. Perhaps that is the case. –  EEAA Oct 8 '10 at 14:57
add comment

2 Answers

That's okay: you can't access resources of processes that are not yours (unless you're root)

share|improve this answer
    
i am logged as root –  John Oct 8 '10 at 4:33
add comment

I am seeing this too when i try and check out file descriptors for my own users process. From what I can tell, it is a cheap work around for a security hole in the /proc file system that allows you to open up files via /proc/$pid/fd bypassing the permissions. It seems they just made all file descriptors in proc owned by root.

I can do this fine on ubuntu, but not CentOS.

You can read about it here: http://lwn.net/Articles/359286/

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.