RE: [cobalt-security] Process...

["Drage, Nicholas" <nickd@xxxxxxxxx>]

> -----Original Message-----
> From: Gerald Waugh [mailto:gerald@xxxxxxxxx]

> > 2 root       0   0     0    0     0 SW      0  0.0  0.0   
> > 0:00 kflushd
> >  3 root       0   0     0    0     0 SW      0  0.0  0.0   
> > 0:01 kupdate
> >  4 root       0   0     0    0     0 SW      0  0.0  0.0   
> > 0:00 kpiod
> >  5 root       0   0     0    0     0 SW      0  0.0  0.0   
> > 0:00 kswapd
> >  6 root     -20 -20     0    0     0 SW<     0  0.0  0.0   0:00
> > mdrecoveryd

> > any idea what these process are... I am not sure and 
> > mdrecoveryd does not sound good. 
> > 
> All the processes above are raid processes.

No they're not, see 

http://www.opennet.ru/base/sys/kernps.txt.html

for details.

> mdrecoveryd is the daemon to recover raid devices (multiple devices). 

-- 
Nick Drage - Security Architecture - Demon Internet - Thus PLC
"Thus should be treated as one of the walking wounded rather than an
intensive care patient in danger of having life support services cut off."
Financial Times 12th July 2001