[mig modules] Detect processes that use deleted libraries

RESOLVED FIXED

Status

Enterprise Information Security
MIG
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: ulfr, Assigned: ulfr)

Tracking

Details

(Assignee)

Description

3 years ago
I often happens during vulnerability patching that libraries are upgraded but processes are not restarted. When that happens, the process is marked as linked to a `deleted` library.
MIG should have a facility to detect this, probably in the memory module. `-deleted` could be a boolean added to the `-lib` parameter to return processes that link to a given library that has been deleted on disk.
Group: mozilla-employee-confidential
Component: Operations Security (OpSec): MIG → MIG
Product: mozilla.org → Enterprise Information Security
Version: other → unspecified
(Assignee)

Updated

3 years ago
Group: mozilla-employee-confidential
(Assignee)

Comment 1

3 years ago
Migrated to github issues: https://github.com/mozilla/mig/issues
Status: ASSIGNED → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.