So new DoS on redhat 7.2 maybe?
when stating files in the /dev dir, it causes modprobe to load them. first started having the problem about 2 weeks ago. happens if you do a ls, find, updatedb or even "rpm -V dev" and walk the /dev dirtree. if you let the find run on the whole /dev tree, it will eventually exhaust all resorces and then daemons start to die, and eventually the box becomes unaccessable until the find is complete, and insmod/modproble is done trying to insert modules.
it was my understanding that the kernel would autoload modules ONLY on an open, not stat!
this is isolated to a single RH7.2 box. i have one more 7.2 box running with same kernel, etc, without issue. This would lead me to believe this is some kind of configuration (proc maybe?) somewhere. note a reboot does not fix the problem.
i've done as much as i can to try to verify that my box is not trojaned.... doing rpm verifies on all the files and md5sums matches my other 7.2 box.
causes these (and MANY more) in /var/log/messages:
Jun 27 10:54:30 zoso last message repeated 10 times
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module block-major-15
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module block-major-24
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module block-major-30
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module block-major-32
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module sound-slot-0
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module sound-service-0-3
Jun 27 10:54:30 zoso kernel: tty_io.c: process 1728 (find) used obsolete /dev/cua - update software to use /dev/ttyS1
Jun 27 10:54:30 zoso kernel: tty_io.c: process 1728 (find) used obsolete /dev/cua - update software to use /dev/ttyS2
Jun 27 10:54:30 zoso kernel: tty_io.c: process 1728 (find) used obsolete /dev/cua - update software to use /dev/ttyS3
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module char-major-205
Jun 27 10:54:30 zoso last message repeated 3 times
Jun 27 10:54:30 zoso modprobe: modprobe: Can't locate module char-major-44
Jun 27 10:54:31 zoso last message repeated 15 times
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module char-major-52
Jun 27 10:54:31 zoso last message repeated 3 times
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module char-major-94
Jun 27 10:54:31 zoso last message repeated 3 times
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module sound-slot-1
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module sound-service-1-3
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module char-major-55
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module char-major-64
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb0
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb1
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb10
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb11
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb12
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb13
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb14
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb15
Jun 27 10:54:31 zoso modprobe: modprobe: Can't locate module fb16
..[snip]....
running:
redhat 7.2
kernel 2.4.20-18.7
glibc-2.2.4-32
any ideas??? (other than pitching it out the window)
