Solved daily security run reports vanished files

hakova

hakova

Dear all,

I am likely missing something here, please be gentle with me.

For the last week or so I started getting error messages indicating some files have vanished in the daily security run output. These are files under /usr/local/etc/apache24 and /usr/local/share/doc/apache24 and their subfolders. Some of them are config folders such as httpd.conf, httpd-autoindex.conf, whereas others are not, like magic, etc. Apache was installed by pkg and kept up-to-date although it is not used as a web server at this time, it is just present. Updating apache24 via pkg reports it is already up-to-date and doesn't solve the problem.

Why would this error message keep repeating every night during the security run? It is true that these files don't exist, but they did not vanish; they simple were never there as far as I am aware of. What would you recommend?

Thanks!
 
Which files exactly is it complaining about? Please show the exact message.
 
Thank you for your quick reply. Please see attached the output of daily security run. Missing files are concerningly high in number. Your assistance is greatly appreciated!
 

Attachments

mer said:
Did you do a pkg upgrade that perhaps replace apache24 with something else?
Click to expand...
No, I did not and apart from the missing files listed, both the directory structure and other files in that tree remain to be intact.
If you look by the end of the file I posted, the "disease" seems to have affected cmake and python 3.7 as well.
This is a VM by the way not FreeBSD on bare metal, if that gives any clue to anyone. It has been hosting/serving my caldav/carddav for 4 years now. Despite all these, those still seem to work well. I wonder if some bitrot or something like that is at work here.
 
What version of FreeBSD? What filesystem? If UFS there have been reports of corruption typically in a VM that has been powered off instead of shutdown. Some of it was triggered by say running a pkg command (install or upgrade) and after the command successfully completes, the power cord was pulled (or on a VM the equivalent). A symptom was on rebooting, you may have needed to fsck but you would have missing files.

The missing files,say httpd.conf would that have been a real file or a symlink? Not sure it makes a difference but would be a piece of data.

If UFS did you take a look in the "lost and found" directory to see if there are files in there? It's been a while since I've run a UFS system, but I seem to recall fsck would put thing there.
 
You were on point. Not sure how it happened but when I had a chance to use the hypervisor tonight and got console access to the VM instead of ssh connection, I saw several error messages related to file system inconsistencies and eventually dropped to single user mode and did fsck. It took several minutes and at the end I got my VM back. However, I deleted the packages with problems reported in the file I attached earlier, namely apache24, cmake, python37 and reinstalled them afterwards, just to minimize the damage at /usr/local. I am hoping that this took care of most and hopefully all of the problem, fingers crossed.

Thank you so much for your patience and guidance! It is very much appreciated.
 
You must log in or register to reply here.
Back
Top