LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Cron Daemon (root@servername.com) (https://www.linuxquestions.org/questions/linux-server-73/cron-daemon-root%40servername-com-609382/)

Raakh 12-27-2007 07:14 AM

Cron Daemon (root@servername.com)
 
OS=RHE

I am receiving lot of mail for the following message from my dedicated server. Why?

Thanks & best regards

Cron <drweb@server> /opt/drweb/update.pl‏
From: Cron Daemon (root@servername.com)
Sent: Sunday, December 23, 2007 4:20:50 PM
To: drweb@servername.com

/bin/sh: /opt/drweb/update.pl: Permission denied

marozsas 12-27-2007 08:29 AM

Any errors and output in cron jobs are e-mailed to the owner of the cron job.

There is a cron job that is trying to execute /opt/drweb/update.pl and this file does not have an execution permission.
Check the permissions of /opt/drweb/update.pl.

PS: Do you know what /opt/drweb/update.pl is supposed to do, don't you ? If you don't know what is this program, is better to remove the associated cron job and figure out how and who is responsible for it.

jschiwal 12-27-2007 08:37 AM

Check the update.pl script. One thing that could case an access denied error is if the server is using SELinux and doesn't allow DrWeb access. It could be that the port that DrWeb uses to get its virus definition updates is closed as well. The e-mail doesn't tell you but the script may also produce a log with more details.
Some programs will have a setting which controls the verbosity of the email warning it sends.

Raakh 12-27-2007 10:30 AM

Quote:

Originally Posted by marozsas (Post 3002864)
Any errors and output in cron jobs are e-mailed to the owner of the cron job.

There is a cron job that is trying to execute /opt/drweb/update.pl and this file does not have an execution permission.
Check the permissions of /opt/drweb/update.pl.

PS: Do you know what /opt/drweb/update.pl is supposed to do, don't you ? If you don't know what is this program, is better to remove the associated cron job and figure out how and who is responsible for it.

I don't know. How can i remove the associated cron job and figure out who is responsible?

thanks & best regards

marozsas 12-27-2007 01:23 PM

Quote:

Originally Posted by Raakh (Post 3002967)
I don't know. How can i remove the associated cron job and figure out who is responsible?

thanks & best regards

There are 2 kinds of cron jobs: the one that run at specific dates&times and jobs that run when the load is low.

To check the first kind, as root, "crontab -l -u username". (or simply check the files on /var/spool/cron/tabs)

To check the second kind, as root, check every file on the following directories: "/etc/cron.d /etc/cron.daily /etc/cron.hourly /etc/cron.monthly /etc/cron.weekly".

In one of theses files you will find a reference for /opt/drweb/update.pl

shortcut:
Code:

# grep -RHn /opt/drweb/update.pl /etc/cron.* /var/spool/cron/tabs

PS: I am going to home now and I will access LQ only in Jan 04 2008. Sorry to not asssist you until them.

jschiwal 12-28-2007 08:41 PM

If you google for DrWeb you will find that it is an antivirus scanner. This may be a cronjob to update its definitions.
http://solutions.drweb.com/business/fileserv/unix/


You could examine the perl script yourself to verify this. Also check the execution permissions on the file.

Raakh 12-29-2007 11:16 AM

Quote:

Originally Posted by jschiwal (Post 3004375)
If you google for DrWeb you will find that it is an antivirus scanner. This may be a cronjob to update its definitions.
http://solutions.drweb.com/business/fileserv/unix/


You could examine the perl script yourself to verify this. Also check the execution permissions on the file.

You are right

thanks for your cooperation

Appreciated!


All times are GMT -5. The time now is 05:03 PM.