| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20090713113252.GB5569@beaver.vrungel.ru> Date: Mon, 13 Jul 2009 15:32:52 +0400 From: Alexey Vlasov <renton@...ton.name> To: Andi Kleen <andi@...stfloor.org> Cc: linux-kernel@...r.kernel.org Subject: Re: Counters in df, du On Mon, Jul 13, 2009 at 11:09:29AM +0200, Andi Kleen wrote: > Alexey Vlasov <renton@...ton.name> writes: > > > > I know that df, du can show different values if some files were deleted, > > but the processes which opened these files are still acting. > > You can check for that by doing ls -l /proc/*/fd | grep deleted > > It won't tell you the file size though. There comes a big list, like this: lowx------ 1 root root 64 Jul 13 14:58 1763 -> /tmp/ZCUDXqiMTp (deleted) lrwx------ 1 root root 64 Jul 13 14:58 1763 -> /tmp/ZCUDXqiMTp (deleted) lrwx------ 1 root root 64 Jul 13 14:58 1763 -> /tmp/ZCUDXqiMTp (deleted) [cut] lrwx------ 1 root root 64 Jul 13 15:29 317 -> /tmp/ZCUDXiOHCk (deleted) lrwx------ 1 root root 64 Jul 13 15:29 317 -> /tmp/ZCUDXiOHCk (deleted) lrwx------ 1 root root 64 Jul 13 15:29 317 -> /tmp/ZCUDXiOHCk (deleted) But you can see the file date, these are new files and by next search you won't see them any more. The most interesting is that the /tmp size constantly grows. -- BRGDS. Alexey Vlasov. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists