So, this thing installs a cron job. Fine. It calls a shell script every 7 minutes. That is a really short script because all it does is grep the output of ps for the agent and uses 'service' to start it if not. Which would be fine on an old Linux system. This is not so old that 'service' doesn’t just redirect to systemctl and chide the user. So we were getting mail to root every 7 minutes.
I assume there’s some reason they don’t just actually make it a service. #Sysadminnery#GrumpyTesting
And why is secure.log growing? Oh, look, that ‘sensor’ is doing a bunch of stuff using ‘sudo’ which is funny when you consider that it is running as root and has no documentation of how to run it in any other way. I think that means it is actually firing off a shell to run the sudo command…
It has become too cheap to launch processes. (not my real issue here…)
Add comment