前几天出现 nginx WAF 被挂码的问题,终于抓到 执行异常进程了root 110201 189279 0 00:08 ? 00:00:00 /usr/sbin/crond -nroot 110202 110201 0 00:08 ? 00:00:00 sh -c touch -r /www/server/nginx/waf/.. /www/server/nginx/waf/config && touch -r /www/server/nginx/waf/.. /www/server/nginx/waf/. && /bin/cp -p /www/server/nginx/conf/proxy.conf /www/server/nginx/conf/proxy.conf.bak && echo \’rewrite_by_lua_file /www/server/nginx/waf/config;\’ >>/www/server/nginx/conf/proxy.conf && /www/server/nginx/sbin/nginx -s reload 2>&1
crond 相关配置都检查了,没发现异常内容,请教下这个问题怎么深挖
2022-11-14 17:36
Click to rate this post!
[Total: 0 Average: 0]