file: /.rnd

[Fred Martin_1]

I just noticed a file on my HP-UX 11.0 system called /.rnd

It's owned by root:sys and permissions are 600, 1024 bytes and contains binary data.

The file date is months old, not sure what would have put the file there.

Does anyone know for certain?

[Jeff Schussele]

HI Fred,

I'd say it has to do with OpenSSL - see the following doc:

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/T1428-90052/T1428-90052_top.html&con=/hpux/onlinedocs/T1428-90052/00/00/37-con.html&toc=/hpux/onlinedocs/T1428-90052/00/00/37-toc.html&searchterms=rnd&queryid=20041012-092317

It's used as a seed value for encryption.

HTH,
Jeff

[Cheryl Griffin]

Does the following tell you anything?
# what /.rnd
# file /.rnd
# strings /.rnd

[Fred Martin_1]

'what' is blank, 'file' says awk (incorrect) and 'strings' displays about 20 lines of junk; it's a binary file.

No one here uses ssl for sure.

[Cheryl Griffin]

I agree with Jeff. OpenSSL
http://groups.google.com/groups?q=%22/.rnd%22+chmod+600&hl=en&lr=&selm=3AEE8441.A2237A49%40gmx.net&rnum=2 puts a file in $HOME/.rnd

Owned by root it could possibly be /.rnd

If OpenSSL is not installed, you don't know what the file is and it has not been accessed, move it and see if you notice any errors.

[Fred Martin_1]

Ok, thanks. I've renamed it to see what happens.