Return to Question

edited tags

Link

edited Apr 19, 2014 at 22:49

Gilles 'SO- stop being evil'

865.3k
205
1.8k
2.3k

Source Link

asked Apr 19, 2014 at 2:44

Mouse.The.Lucky.Dog

2.1k
2
28
40

Why is konsole reading /etc/passwd?

In relation to this question:

While observing the behavior of fatrace, I notice something which concerns me. Here are the first few lines of output of the command "fatrace|grep konsole"

konsole(4112): O /etc/passwd
konsole(4112): CO /etc/passwd
konsole(4112): C /etc/passwd
konsole(4112): O /etc/passwd
konsole(4112): C /etc/passwd
konsole(4112): O /etc/passwd
konsole(4112): C /etc/passwd
konsole(4112): O /etc/passwd
konsole(4112): C /etc/passwd
konsole(4112): O /etc/passwd
konsole(4112): C /etc/passwd
konsole(4112): O /etc/passwd
konsole(4112): C /etc/passwd
konsole(4112): O /etc/passwd
konsole(4112): C /etc/passwd
konsole(4112): O /etc/passwd
...

The thing is that lsof|grep passwd shows that passwd is not open by any process.

So any idea what is going on?

security fatrace