The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Previously unseen tmp directories

Discussion in 'General Discussion' started by tetraweb, Nov 18, 2005.

  1. tetraweb

    tetraweb Member

    Joined:
    May 19, 2003
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Noticing lots of directories owned by nobody in /tmp called e.g.
    /tmp/p2xtmp-1234
    /tmp/p2xtmp-5678

    etc. About 8-10 of them created over last several days

    Cause for concern or normal? Google shows it as a result of perl2exe, which I don't know what on my server would be running that (cpanel 10.8.1R30 redhat 7.3)

    Any ideas?

    Greg
     
  2. astopy

    astopy Well-Known Member

    Joined:
    Apr 3, 2003
    Messages:
    165
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    What's in these directories?
     
  3. tetraweb

    tetraweb Member

    Joined:
    May 19, 2003
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Nothing.

    Greg
     
  4. astopy

    astopy Well-Known Member

    Joined:
    Apr 3, 2003
    Messages:
    165
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    If they're empty my first instinct is that they don't post any immediate threat. Having said that, it does seem very suspicious that someone on the server may be running perl2exe - I can't think what use a shared hosting customer would have for running it, but then I'd never heard of it before reading this. The possibility exists that binaries generated by perl2exe may create these directories, and if so that probably means that one of your users is just using a CGI binary which was created with it.

    I'd say you need to find out which account created these directories and then find out what they're doing with perl2exe, and also why perl2exe creates the directories.

    Do you have suExec enabled?
     
  5. tetraweb

    tetraweb Member

    Joined:
    May 19, 2003
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Yes, but the directories are owned by 'nobody'

    Greg
     
  6. astopy

    astopy Well-Known Member

    Joined:
    Apr 3, 2003
    Messages:
    165
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    In that case it's probably not a CGI binary. If you don't have phpSuExec enabled as well then it could be a PHP script that's creating them. If not that then I'm all out of ideas.
     
Loading...
Similar Threads - Previously unseen tmp
  1. electric
    Replies:
    5
    Views:
    238

Share This Page