LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 07-21-2005, 09:01 AM   #1
jekd
LQ Newbie
 
Registered: Jun 2005
Posts: 5

Rep: Reputation: 0
Automatically OS becoming Read only mode


Hi,

I have two similar PE 6650 systems which has SUSE Linux 9(SLES 9) OS installed. One of the system behaving differently. Other one is stable.
Oracle 10g database is also installed in both server.

The problem in the first server is as follows:

The system sometimes turn into read-only mode which creates almost every problem in the world.
1. The database cannot write anything into the file system. so it stops or closes or crashes.
2. Most of the linux command does not work at all.
3. Cannot shutdown or reboot the system
4. Cannot even read /var/log/message or /var/log/warn file.
5. If I try to create a file anywhere it come up with first message
"E303: Unable to open swap file for "abc", recovery impossible" and while coming out it is showing "E138: Can't write viminfo file /home/oracle/.viminfo!" as I logged in as oracle
6. The file system looks normal.
7. Then the only way I have to do is go to server room and switch off the power and start again which is a very bad thing to do, but I don't have any choice.
8. The possible explanation might me.. "the problem with Hardware", but I am not sure

I need a desperate help here. Thanks in advance for any suggestion, idea, solutions.

Thanks
jekd
 
Old 07-21-2005, 09:52 AM   #2
Half_Elf
LQ Guru
 
Registered: Sep 2001
Location: Montreal, Canada
Distribution: Slackware; Debian; Gentoo...
Posts: 2,163

Rep: Reputation: 46
Quote:
2. Most of the linux command does not work at all.
Quote:
3. Cannot shutdown or reboot the system
Quote:
4. Cannot even read /var/log/message or /var/log/warn file.
Sincerely, this sound like you have been badly rooted (hacked) and that you server is badly compromised. You better boot-up with a live-cd distro (like knoppix) and to find this out _quick_.
 
Old 07-21-2005, 10:41 AM   #3
jekd
LQ Newbie
 
Registered: Jun 2005
Posts: 5

Original Poster
Rep: Reputation: 0
I started the system again

Thanks for suggestion,

Could you please suggest me to look some suspicious activity in some files.

jekd
 
Old 07-21-2005, 11:32 AM   #4
Half_Elf
LQ Guru
 
Registered: Sep 2001
Location: Montreal, Canada
Distribution: Slackware; Debian; Gentoo...
Posts: 2,163

Rep: Reputation: 46
once you have booted from a livecd, take a look at your logs, see if you have something weird about SMTP server or HTTP server (these are usually what attackers wants).

If you find out the server is really comproised, backup and reinstall. It's too dangerous to keep this OS, even if you clean it you won't be sure they haven't left a backdoor somewhere in a binary.
And you better update your second server ASAP.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenOffice opens files in read-only mode baskerville Linux - Software 2 08-11-2005 03:29 PM
deaclare variable automatically with while read suchi_s Programming 1 09-13-2004 08:25 AM
What causes my /dev/hda2 to remount in read only mode? matsen Linux - General 1 03-01-2004 04:05 PM
Open office read only, K-write read/write mode lwtvh Linux - Newbie 1 07-19-2003 11:33 AM
Fs mounted in Read Only , Read Write Mode benjaminrtz Linux - General 2 07-31-2002 02:52 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 02:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration