Comments on: How to Ninja http://blog.bodhizazen.net/linux/how-to-ninja/ A LAMP in the Samsara Tue, 31 Jan 2012 20:20:11 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: bodhi.zazen http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-3201 bodhi.zazen Thu, 24 Mar 2011 15:15:08 +0000 http://blog.bodhizazen.net/?p=368#comment-3201 @Wolfgang I would post the script in question as well as those logs on the appropriate (ubuntu) forums to see if you can get some advice. If you do , send me a PM on the forums and I will look at what you post. @Wolfgang

I would post the script in question as well as those logs on the appropriate (ubuntu) forums to see if you can get some advice. If you do , send me a PM on the forums and I will look at what you post.

]]> By: Wolfgang http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-3187 Wolfgang Tue, 22 Mar 2011 22:29:13 +0000 http://blog.bodhizazen.net/?p=368#comment-3187 I've been using Ninja for a few months, and only recently had a problem that I can't figure out. I am trying to run a script that does an update for me (updates a series of databases from NCBI, it's a public script called update_blastdb.pl) and every time I execute this script it gets killed. I'm an authorized user, but I suspect the script launches things and IT isn't an authorized user. I've appended the relevant ninja.log entries; I just can't figure out what I need to modify to get this script to execute when I want it to without disabling Ninja! Help! [Tue Mar 22 18:04:55 2011] NEW ROOT PROCESS: update_blastdb.[11693] ppid=11655 uid=0 gid=0 [Tue Mar 22 18:04:55 2011] - ppid uid=1001(wolfgang) gid=1001 ppid=11654 [Tue Mar 22 18:04:55 2011] + wolfgang is in magic group, all OK! [Tue Mar 22 18:04:56 2011] NEW ROOT PROCESS: sh[11704] ppid=11695 uid=65534 gid=0 [Tue Mar 22 18:04:56 2011] - ppid uid=65534(nobody) gid=0 ppid=11693 [Tue Mar 22 18:04:56 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11704] (parent: perldoc[11695]) [Tue Mar 22 18:04:56 2011] - sending signal SIGKILL to pid 11704 [Tue Mar 22 18:04:56 2011] * offending process(es) terminated [Tue Mar 22 18:04:57 2011] NEW ROOT PROCESS: pager[11706] ppid=11705 uid=65534 gid=0 [Tue Mar 22 18:04:57 2011] - ppid uid=65534(nobody) gid=0 ppid=1 [Tue Mar 22 18:04:57 2011] + UNAUTHORIZED PROCESS DETECTED: pager[11706] (parent: sensible-pager[11705]) [Tue Mar 22 18:04:57 2011] - sending signal SIGKILL to pid 11706 [Tue Mar 22 18:04:57 2011] * offending process(es) terminated [Tue Mar 22 18:04:57 2011] NEW ROOT PROCESS: sh[11707] ppid=11695 uid=65534 gid=0 [Tue Mar 22 18:04:57 2011] - ppid uid=65534(nobody) gid=0 ppid=11693 [Tue Mar 22 18:04:57 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11707] (parent: perldoc[11695]) [Tue Mar 22 18:04:57 2011] - sending signal SIGKILL to pid 11707 [Tue Mar 22 18:04:57 2011] * offending process(es) terminated [Tue Mar 22 18:04:58 2011] NEW ROOT PROCESS: sh[11709] ppid=11695 uid=65534 gid=0 [Tue Mar 22 18:04:58 2011] - ppid uid=65534(nobody) gid=0 ppid=11693 [Tue Mar 22 18:04:58 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11709] (parent: perldoc[11695]) [Tue Mar 22 18:04:58 2011] - sending signal SIGKILL to pid 11709 [Tue Mar 22 18:04:58 2011] * offending process(es) terminated [Tue Mar 22 18:04:59 2011] NEW ROOT PROCESS: sh[11711] ppid=11695 uid=65534 gid=0 [Tue Mar 22 18:04:59 2011] - ppid uid=65534(nobody) gid=0 ppid=11693 [Tue Mar 22 18:04:59 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11711] (parent: perldoc[11695]) [Tue Mar 22 18:04:59 2011] - sending signal SIGKILL to pid 11711 [Tue Mar 22 18:04:59 2011] * offending process(es) terminated [Tue Mar 22 18:05:00 2011] NEW ROOT PROCESS: sh[11713] ppid=11695 uid=65534 gid=0 [Tue Mar 22 18:05:00 2011] - ppid uid=65534(nobody) gid=0 ppid=11693 [Tue Mar 22 18:05:00 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11713] (parent: perldoc[11695]) [Tue Mar 22 18:05:00 2011] - sending signal SIGKILL to pid 11713 [Tue Mar 22 18:05:00 2011] * offending process(es) terminated I’ve been using Ninja for a few months, and only recently had a problem that I can’t figure out. I am trying to run a script that does an update for me (updates a series of databases from NCBI, it’s a public script called update_blastdb.pl) and every time I execute this script it gets killed. I’m an authorized user, but I suspect the script launches things and IT isn’t an authorized user. I’ve appended the relevant ninja.log entries; I just can’t figure out what I need to modify to get this script to execute when I want it to without disabling Ninja! Help!

[Tue Mar 22 18:04:55 2011] NEW ROOT PROCESS: update_blastdb.[11693] ppid=11655 uid=0 gid=0
[Tue Mar 22 18:04:55 2011] – ppid uid=1001(wolfgang) gid=1001 ppid=11654
[Tue Mar 22 18:04:55 2011] + wolfgang is in magic group, all OK!
[Tue Mar 22 18:04:56 2011] NEW ROOT PROCESS: sh[11704] ppid=11695 uid=65534 gid=0
[Tue Mar 22 18:04:56 2011] – ppid uid=65534(nobody) gid=0 ppid=11693
[Tue Mar 22 18:04:56 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11704] (parent: perldoc[11695])
[Tue Mar 22 18:04:56 2011] – sending signal SIGKILL to pid 11704
[Tue Mar 22 18:04:56 2011] * offending process(es) terminated
[Tue Mar 22 18:04:57 2011] NEW ROOT PROCESS: pager[11706] ppid=11705 uid=65534 gid=0
[Tue Mar 22 18:04:57 2011] – ppid uid=65534(nobody) gid=0 ppid=1
[Tue Mar 22 18:04:57 2011] + UNAUTHORIZED PROCESS DETECTED: pager[11706] (parent: sensible-pager[11705])
[Tue Mar 22 18:04:57 2011] – sending signal SIGKILL to pid 11706
[Tue Mar 22 18:04:57 2011] * offending process(es) terminated
[Tue Mar 22 18:04:57 2011] NEW ROOT PROCESS: sh[11707] ppid=11695 uid=65534 gid=0
[Tue Mar 22 18:04:57 2011] – ppid uid=65534(nobody) gid=0 ppid=11693
[Tue Mar 22 18:04:57 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11707] (parent: perldoc[11695])
[Tue Mar 22 18:04:57 2011] – sending signal SIGKILL to pid 11707
[Tue Mar 22 18:04:57 2011] * offending process(es) terminated
[Tue Mar 22 18:04:58 2011] NEW ROOT PROCESS: sh[11709] ppid=11695 uid=65534 gid=0
[Tue Mar 22 18:04:58 2011] – ppid uid=65534(nobody) gid=0 ppid=11693
[Tue Mar 22 18:04:58 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11709] (parent: perldoc[11695])
[Tue Mar 22 18:04:58 2011] – sending signal SIGKILL to pid 11709
[Tue Mar 22 18:04:58 2011] * offending process(es) terminated
[Tue Mar 22 18:04:59 2011] NEW ROOT PROCESS: sh[11711] ppid=11695 uid=65534 gid=0
[Tue Mar 22 18:04:59 2011] – ppid uid=65534(nobody) gid=0 ppid=11693
[Tue Mar 22 18:04:59 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11711] (parent: perldoc[11695])
[Tue Mar 22 18:04:59 2011] – sending signal SIGKILL to pid 11711
[Tue Mar 22 18:04:59 2011] * offending process(es) terminated
[Tue Mar 22 18:05:00 2011] NEW ROOT PROCESS: sh[11713] ppid=11695 uid=65534 gid=0
[Tue Mar 22 18:05:00 2011] – ppid uid=65534(nobody) gid=0 ppid=11693
[Tue Mar 22 18:05:00 2011] + UNAUTHORIZED PROCESS DETECTED: sh[11713] (parent: perldoc[11695])
[Tue Mar 22 18:05:00 2011] – sending signal SIGKILL to pid 11713
[Tue Mar 22 18:05:00 2011] * offending process(es) terminated

]]> By: Dos herramientas para Sysadmins: Ninja y KSplice : Revistalinux.net, Linux, software libre, Ubuntu, programación http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-2182 Dos herramientas para Sysadmins: Ninja y KSplice : Revistalinux.net, Linux, software libre, Ubuntu, programación Mon, 20 Sep 2010 10:36:31 +0000 http://blog.bodhizazen.net/?p=368#comment-2182 [...] algo más sencillo y no tan crítico, como dar acceso de terminal o X  a usuarios finales. Acá hay un post sobre cómo instalarlo en [...] [...] algo más sencillo y no tan crítico, como dar acceso de terminal o X  a usuarios finales. Acá hay un post sobre cómo instalarlo en [...]

]]> By: Add a ninja to help protect your server | Linux Shtuff http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1667 Add a ninja to help protect your server | Linux Shtuff Mon, 19 Apr 2010 07:22:13 +0000 http://blog.bodhizazen.net/?p=368#comment-1667 [...] RESOURCES How to Ninja and How to Ninja – Ubuntu 10.04 by [...] [...] RESOURCES How to Ninja and How to Ninja – Ubuntu 10.04 by [...]

]]> By: bodhi.zazen http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1646 bodhi.zazen Fri, 16 Apr 2010 21:01:21 +0000 http://blog.bodhizazen.net/?p=368#comment-1646 @ Mark_in_Hollywood : The Ubuntu/Debian ninja package has been updated, so after reviewing your post, I posted an updated how to ninja : http://blog.bodhizazen.net/linux/how-to-ninja-ubuntu-10-04/ @ Mark_in_Hollywood :

The Ubuntu/Debian ninja package has been updated, so after reviewing your post, I posted an updated how to ninja :

http://blog.bodhizazen.net/linux/how-to-ninja-ubuntu-10-04/

]]> By: Shadows of epiphany » Blog Archive » How to Ninja – Ubuntu 10.04 http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1645 Shadows of epiphany » Blog Archive » How to Ninja – Ubuntu 10.04 Fri, 16 Apr 2010 20:59:49 +0000 http://blog.bodhizazen.net/?p=368#comment-1645 [...] This blog is an update to my original post on ninja here [...] [...] This blog is an update to my original post on ninja here [...]

]]> By: Mark_in_Hollywood http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1641 Mark_in_Hollywood Thu, 15 Apr 2010 18:09:59 +0000 http://blog.bodhizazen.net/?p=368#comment-1641 My /var/log/ninja.log is blank or empty. Is that correct? Running your: root@karmic# sudo -u nobody /bin/bash bash: /root/.bashrc: Permission denied nobody@karmic$ whoami nobody nobody@karmic$ sudo -i [sudo] password for nobody: Killed nobody@karmic$ Killed root@karmic# gave me slightly different results than what you show. My /var/log/ninja.log is blank or empty. Is that correct?

Running your:

root@karmic# sudo -u nobody /bin/bash
bash: /root/.bashrc: Permission denied

nobody@karmic$ whoami
nobody

nobody@karmic$ sudo -i
[sudo] password for nobody: Killed
nobody@karmic$ Killed
root@karmic#

gave me slightly different results than what you show.

]]> By: gnumax http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1441 gnumax Sun, 10 Jan 2010 06:04:46 +0000 http://blog.bodhizazen.net/?p=368#comment-1441 Thank you for sharing this howto, I liked the tool and working properly. log: [Sun Jan 10 07:01:57 2010] NEW ROOT PROCESS: su[21536] ppid=21414 uid=0 gid=1000 [Sun Jan 10 07:01:57 2010] - ppid uid=1000(xxxxx ) gid=1000 ppid=17568 [Sun Jan 10 07:01:57 2010] + xxxxx is in magic group, all OK! ;)---- Thank you for sharing this howto, I liked the tool and working properly.

log:

[Sun Jan 10 07:01:57 2010] NEW ROOT PROCESS: su[21536] ppid=21414 uid=0 gid=1000
[Sun Jan 10 07:01:57 2010] – ppid uid=1000(xxxxx ) gid=1000 ppid=17568
[Sun Jan 10 07:01:57 2010] + xxxxx is in magic group, all OK!

;)—-

]]> By: Billy http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1152 Billy Mon, 26 Oct 2009 04:25:08 +0000 http://blog.bodhizazen.net/?p=368#comment-1152 Awesome! nice ninja tutorial Awesome! nice ninja tutorial

]]> By: severity1 http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1145 severity1 Mon, 26 Oct 2009 01:35:04 +0000 http://blog.bodhizazen.net/?p=368#comment-1145 neat! neat!

]]>