AlmaLinux出现libutilkeybd.so报错

最近接了几个运维的活, 更新内核的时候 dracut生成 initrd失败,大量出现关键词libutilkeybd.so

追溯文件日期是9月21日,起初还以为是AlmaLinux的问题。

除了dracut,用ldd和losf也能看到被注入。

清空ld.so.preload和删除文件后系统正常了。

 

ldd /usr/lib64/libssl.so.3.2.2
	linux-vdso.so.1 (0x00007ffdba2f8000)
	/var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so (0x00007f9486200000)
	libcrypto.so.3 => /lib64/libcrypto.so.3 (0x00007f9485c00000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f9485800000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f94864d5000)
	libz.so.1 => /lib64/libz.so.1 (0x00007f94864bb000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f94865cb000)
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
bash       7749                    root  mem       REG              259,4    33816   11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so
lsof      36787                    root  mem       REG              259,4    33816   11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so
grep      36788                    root  mem       REG              259,4    33816   11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so
lsof      36789                    root  mem       REG              259,4    33816   11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so

解决方法

rm -f /var/adm/*/kernel/libutilkeybd.so
echo>/etc/ld.so.preload