Path: utzoo!utgpu!news-server.csri.toronto.edu!bonnie.concordia.ca!uunet!mcsun!ukc!strath-cs!prlhp1!pearmana
From: pearmana@prlhp1.prl.philips.co.uk (Andy Pearman)
Newsgroups: comp.sys.hp
Subject: Whats going on here then ?
Keywords: find xargs HP-UX6.5
Message-ID: <1356@prlhp1.prl.philips.co.uk>
Date: 12 Jun 91 16:46:33 GMT
Reply-To: pearmana@prl.philips.co.uk
Organization: Philips Research Laboratories, Redhill, UK
Lines: 26


A couple of weeks ago I upgraded my HP9000-350 to HP-UX6.5

Today I noticed a couple of odd processes (see below) running owned by 
root, apparently going through the filesystem and doing something with 
acl's for uids 248 and 251.  These uids in fact belonged to two users 
that I deleted earlier today.

I notice that the processes appear to have been started by init, though
I find no references in inittab.

Is this something new, and if so what's going on ?


UID   PID  PPID  C    STIME TTY      TIME COMMAND
root     1     0  0  Jun  5  ?        0:39 /etc/init
root 10497 10496 10 15:28:55 ttyp5    3:58 find / -acl opt -a ( ! -user 248 ) -a -acl 248.* -print
root 10496     1  0 15:28:54 ttyp5    0:00 xargs chacl -d 248.*
root 10452     1  0 15:25:26 ttyp5    0:00 xargs chacl -d 251.*
root 10453 10452  8 15:25:26 ttyp5    4:30 find / -acl opt -a ( ! -user 251 ) -a -acl 251.* -print

   Andy.
-- 

Andy Pearman, Computer Dept, Philips Research Labs, Redhill, Surrey, England. 
              pearmana@prl.philips.co.uk