AlmaLinux出现libutilkeybd.so报错
最近接了几个运维的活, 更新内核的时候 dracut生成 initrd失败,大量出现关键词libutilkeybd.so
追溯文件日期是9月21日,起初还以为是AlmaLinux的问题。
除了dracut,用ldd和losf也能看到被注入。
清空ld.so.preload和删除文件后系统正常了。
ldd /usr/lib64/libssl.so.3.2.2
linux-vdso.so.1 (0x00007ffdba2f8000)
/var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so (0x00007f9486200000)
libcrypto.so.3 => /lib64/libcrypto.so.3 (0x00007f9485c00000)
libc.so.6 => /lib64/libc.so.6 (0x00007f9485800000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f94864d5000)
libz.so.1 => /lib64/libz.so.1 (0x00007f94864bb000)
/lib64/ld-linux-x86-64.so.2 (0x00007f94865cb000)
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
lsof: no pwd entry for UID 101
bash 7749 root mem REG 259,4 33816 11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so
lsof 36787 root mem REG 259,4 33816 11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so
grep 36788 root mem REG 259,4 33816 11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so
lsof 36789 root mem REG 259,4 33816 11535609 /var/adm/ab806535-6c06-4d89-a103-3568a19b24e8/kernel/libutilkeybd.so
解决方法
rm -f /var/adm/*/kernel/libutilkeybd.so
echo>/etc/ld.so.preload
none