sh: find: Execute permission denied.

[Mel Burslan]

if you have a system similar to this one, with OS version hpux 11.11, you try copying the executable from that system to this one, after making sure you get the output Patrick gave, is what you see on the non-corrupted server. More than likely, it will work.

When it comes to how and why it happened: your guess is as good as mine. Someone might have copied some other executable file over find accidentally or maliciously. I'd keep a copy of corrupt file and run it under tusc to see what it actually is doing. The message you are seeing might be given by the executable, not the shell, to mislead you if it was put there with a malicious intent.

[Patrick Wallek]

If you have a backup, which I'm sure you do, then you could also try restoring the file from some date prior to July 16, 2009 at 17:42.

[JUAN VIDAL_1]

ACTIONS TAKEN:
--------------

1) Checked "find" status on other PA-RISC server:
# file find
find: PA-RISC1.1 shared executable dynamically linked
# what /usr/bin/find
/usr/bin/find:
find.c $Date: 2002/02/05 22:05:26 $Revision: r11.11/2 PATCH_11.11 (PHCO_25905)
funcs.c $Date: 2002/02/09 04:05:22 $Revision: r11.11/2 PATCH_11.11 (PHCO_25905)
$Revision: @(#) find CUP11.11_BL2002_0213_2 PATCH_11.11 PHCO_25905
Wed Feb 13 07:05:23 PST 2002 $



2) Copied file onto affected server.
3) Checked "find" file permissions/owner/group (555/bin/bin)
4) find works properly.


PROBLEM ROOT CAUSE:
-------------------

Aparently someone installed some Itanium Patch...

[Patrick Wallek]

>>Aparently someone installed some Itanium Patch...

That should not be possible on this server. There was never an 11.11 version for Itanium servers and the patch should not have allowed itself to be installed.

What did the 'what /usr/bin/find' on the "bad" find return?

[JUAN VIDAL_1]

>> What did the 'what /usr/bin/find' on the "bad" find return?

# what /usr/bin/find
/usr/bin/find:
#

no output. I checked into an Itanium box and I saw the same output for find: ELF-32...that's why I guessed someone by mistake installed a wrong patch...

[Dennis Handly]

>that's why I guessed someone by mistake installed a wrong patch

Typically if you installed a patch, the date on find would be before the patch was created, not some recent date like Jul 16.

Some sysadmin must have manually copied that file there.