FS#66314 - DHCPCD copies system directories to /var/lib/dhcpcd/
Attached to Project:
Arch Linux
Opened by Steve Schaeffer (schasj) - Sunday, 19 April 2020, 18:49 GMT
Last edited by Antonio Rojas (arojas) - Sunday, 19 April 2020, 20:26 GMT
Opened by Steve Schaeffer (schasj) - Sunday, 19 April 2020, 18:49 GMT
Last edited by Antonio Rojas (arojas) - Sunday, 19 April 2020, 20:26 GMT
|
Details
DHCPCD 9.0.1 copies /dev /etc /proc /run /sys /var to
/var/lib/dhcpcd
Additional info: Before upgrade... -rw-r--r-- 1 root root 42 Aug 3 2013 duid -rw-r--r-- 1 root root 321 Apr 19 09:39 eth0.lease -rw-r--r-- 1 root root 131 Apr 19 11:44 eth0.lease6 After upgrade... drwxr-xr-x 20 root root 3.7K Apr 18 22:04 dev -rw-r--r-- 1 root root 42 Aug 3 2013 duid drwxr-xr-x 2 root root 4.0K Apr 19 11:32 etc -rw-r--r-- 1 root root 321 Apr 19 09:39 eth0.lease -rw-r--r-- 1 root root 131 Apr 19 11:44 eth0.lease6 dr-xr-xr-x 213 root root 0 Apr 18 22:04 proc drwxr-xr-x 4 root root 4.0K Apr 19 11:32 run dr-xr-xr-x 13 root root 0 Apr 18 22:04 sys drwxr-xr-x 3 root root 4.0K Apr 19 11:32 var Steps to reproduce: Install/upgrade DHCPCD to version 9.0.1 ls -l /var/lib/dhcpcd |
This task depends upon
Closed by Antonio Rojas (arojas)
Sunday, 19 April 2020, 20:26 GMT
Reason for closing: Not a bug
Additional comments about closing: This is expected
Sunday, 19 April 2020, 20:26 GMT
Reason for closing: Not a bug
Additional comments about closing: This is expected
Comment by
Steve Schaeffer (schasj) - Sunday,
19 April 2020, 19:49 GMT
After trying to clean this up I think this may well be malicious.