Page 1 of 1
Possible root compromise detected, failed to create /dev/null:
Posted: Tue May 01, 2018 9:08 am
by stark
Hi,
I received an email from my cpanel said :
Attempts to create new directories or files whose filenames begin with numbers have failed.
This is indicative of a root compromise of the server.
The exact error encountered was:
Failed to create directory /dev/null: No such file or directory
Any help?
Many thanks!
Re: Possible root compromise detected, failed to create /dev/null:
Posted: Tue May 01, 2018 9:10 am
by Ashlin
I received this email also
Is my server get compromised ?
Re: Possible root compromise detected, failed to create /dev/null:
Posted: Fri May 11, 2018 12:24 pm
by chris ben
Hi,
Actually the issue occur when inode or disk usage is full on /tmp directory, you can check it using following link.
Check disk usage
#df -h /tmp
Check inode usage
#df -i /tmp
If you found directory full you should clear some unnecessary files from /tmp to fix this problem.
Re: Possible root compromise detected, failed to create /dev/null:
Posted: Fri May 11, 2018 12:35 pm
by Brandon N
Hi,
Yes, you try installing tmpwatch on server , it will help to clean /tmp directory
Installing tmpwatch
yum install tmpwatch -y
Use this command to delete all files over 12 hours old
tmpwatch -am 12 /tmp
Do you need professional help with this? Please open a support ticket to support@nixtree.com we'll fix it for you!
Brandon N
Linux Support Engineer.
Nixtree Solutions
Managed Full Server Backups
https://www.nixtree.com/managed-backups.php
Follow us on : https://twitter.com/nixtree
Re: Possible root compromise detected, failed to create /dev/null:
Posted: Wed May 16, 2018 7:03 pm
by stark
That's Works!
Many thanks