[prev in list] [next in list] [prev in thread] [next in thread] 

List:       redhat-devel
Subject:    lsof is right ?
From:       Stan Bubrouski nullness () crosswinds ! net
Date:       2000-09-17 17:57:09
[Download RAW message or body]

At 09:54 PM 9/14/2000 +0300, Angelo Neacsu wrote:
>Hi.
>I had done the following command on my RH6.2 box:
>
>[root@ns1 tftp]# lsof /var/spool/mail/simona2
>COMMAND  PID USER   FD   TYPE DEVICE  SIZE   NODE NAME
>ipop3d  3469 root    4u   REG    3,6 14460 155069 /var/spool/mail/simona2
>
>[root@ns1 tftp]# ps uax|grep simona
>simona2   3469  0.0  0.2  1972 1028 ?        S    21:40   0:00 ipop3d
>
>Why lsof reports USER=root, when the file is actualy accessed through
>ipop3d by user simona2 ?

Probably because ipop3d was executed as root and dropped privilages after
the login process was completed.  That's how ipop3d uses privilaged port 110,
that confuses alot of people :-)

-Stan Bubrouski

[prev in list] [next in list] [prev in thread] [next in thread]