Hello all,
I just noticed that one of my users, his account has been the user that has been running spamassassin/spamd child processes along with Root account doing the same thing. Is this safe, right??? I don't want to leave the system open for exploit. Here is a copy of the process list within the last few minutes. The thing is, it's only the 'crimulus' user who is running it along with root... NO other user accounts appear:
16993 crimulus 22.7 % spamd child
358 crimulus 8.6 % spamd child
3926 crimulus 2.3 % spamd child
26523 root 1.7 % spamd child
28419 root 1.6 % spamd child
What caused me to notice this was recently my server was acting like it was slammed with the processes running at like 10.9 / 8.0 / 18.7 which obviously is WAY more than it should be for a dual CPU system. I temporarily disabled the account (crimulus) and sure enough my processes are back down to like 0.2 / 0.5 / 0.3 under normal load.
Advice??? Help!!?
I just noticed that one of my users, his account has been the user that has been running spamassassin/spamd child processes along with Root account doing the same thing. Is this safe, right??? I don't want to leave the system open for exploit. Here is a copy of the process list within the last few minutes. The thing is, it's only the 'crimulus' user who is running it along with root... NO other user accounts appear:
16993 crimulus 22.7 % spamd child
358 crimulus 8.6 % spamd child
3926 crimulus 2.3 % spamd child
26523 root 1.7 % spamd child
28419 root 1.6 % spamd child
What caused me to notice this was recently my server was acting like it was slammed with the processes running at like 10.9 / 8.0 / 18.7 which obviously is WAY more than it should be for a dual CPU system. I temporarily disabled the account (crimulus) and sure enough my processes are back down to like 0.2 / 0.5 / 0.3 under normal load.
Advice??? Help!!?
Last edited: