at: job name should be displayed in output from `ps'

Bug #237233 reported by Xeno Campanoli
6
Affects Status Importance Assigned to Milestone
at (Ubuntu)
Triaged
Wishlist
Unassigned

Bug Description

Make a simple bash script:

#!/bin/bash
# a script called mess.bash
while :
do
date >>/tmp/mess.lst
sleep 1
done
----snip----
Run this interactively and you can tail /tmp/mess.lst until you end the job, but if you: at -f mess.bash now, then you get something that goes forever and cannot be stopped by mere mortals, apparently. If you kill with atrm jobno, that job goes away, but the /tmp/mess.lst continues to be written to until you reboot. It shows no listing that I am able to discern on ps auxw output. I have tried it on both server and desktop, and it fails the same way. Presumably this is a security problem also, as it someone does break in, they can easily install a worm that will never be seen be either a novice, or a fairly experienced user like myself.

Revision history for this message
Xeno Campanoli (xeno) wrote : Re: at allows starting of scripts that cannot be stopped by user.

Looks like it actually shows up as just plain "sh" in ps auxw. Too bad it could not be seen as the name of the script. Very hard to find.

Revision history for this message
Kees Cook (kees) wrote : Re: at obfuscates script names

Thanks for your bug report! I'm not classifying this as a security issue, but it is perhaps a bug with how at executes shell scripts. It's not missing, but it is pretty clear something is running, and by who:

 $ pstree -lup | grep -- -at
         |-atd(8848,daemon)---atd(16284)---sh(16285,kees)---sleep(16484)
 $ cat /proc/16285/cmdline; echo ''
 sh

Changed in at:
status: New → Confirmed
summary: - at obfuscates script names
+ at: job name should be displayed in output from `ps'
Revision history for this message
Micah Gersten (micahg) wrote :

Debian maintainer confirms all information is in the bug, so marking Triaged.

Changed in at (Ubuntu):
importance: Undecided → Wishlist
status: Confirmed → Triaged
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.