Sasi Peter writes:
> Not only have I written, that no user processes were running, but also,
> that afet a reboot, an e2fsck -f did find a REAL LOT of inconsistencies!
>
> > This makes me inclined to believe that it's more likely an
> > ill-behaved application rather than an intrusion, but I would still
> > sweep your system CAREFULLY from known good sources of software.
> > You don't want to find yourself being an unwitting participant in
> > the next DDoS attack by providing a home for a zombie...
>
> I disagree, bacause misbehaving ap[plications do not know about bitmap
> inconsistencies, or group counts, and those were that went wrong.
Mis-behaving applications may not know about bitmaps, but...
During the shutdown leading up to the reboot, did ALL filesystems get
cleanly unmounted? If your 58GB partition did not get cleanly unmounted,
then it is very possible to end up with situations where e2fsck does
spit out a lot of corrections.
Another point here is - when it went wrong, did you try remounting
the filesystem read only? That should be enough to get the filesystem
into a stable state, and using the "sync" command subsequently for
extra peace of mind doesn't go amiss. (If it happens again, which I
doubt, try this. If you still get the errors, then something is amiss).
However, if your data is important to you, and you're not changing it
regularly, I would advise to keep such partitions mounted read-only
as an additional safety-net against accidental deletion/modification of
that data.
_____
|_____| ------------------------------------------------- ---+---+-
| | Russell King rmk@arm.linux.org.uk --- ---
| | | | http://www.arm.linux.org.uk/~rmk/aboutme.html / / |
| +-+-+ --- -+-
/ | THE developer of ARM Linux |+| /|\
/ | | | --- |
+-+-+ ------------------------------------------------- /\\\ |
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Tue May 23 2000 - 21:00:11 EST