Welcome!
Important information
-- Spectre and Meltdown vulnerabilities
-- Change in MX sources

News
-- MX Linux on social media: here
-- Mepis support still here

Current releases
-- MX-17.1 Final release info here
-- antiX-17 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

crypto in MEPIS12 ?

Here users can ask questions about security and tutorials about security can be posted to help others, too.
Post Reply
Message
Author
User avatar
eemaestro
Forum Guide
Forum Guide
Posts: 1010
Joined: Wed Aug 02, 2006 12:12 pm

crypto in MEPIS12 ?

#1 Post by eemaestro » Wed Oct 15, 2014 11:39 am

Why is there a process named crypto running under MEPIS12? Is it part of MEPIS? I don't ever recall using software containing the word "crypto". Please note I also installed ntp - network time protocol-- a daemon that synchronizes my computer with NIST time.

Code: Select all

$ ps -A | grep crypt
   43 ?        00:00:00 crypto
jon@mepis1:~$ man crypto
No manual entry for crypto
jon@mepis1:~$ pkill crypto
pkill: killing pid 43 failed: Operation not permitted

User avatar
timkb4cq
Forum Veteran
Forum Veteran
Posts: 4343
Joined: Wed Jul 12, 2006 4:05 pm

Re: crypto in MEPIS12 ?

#2 Post by timkb4cq » Wed Oct 15, 2014 1:00 pm

Code: Select all

root@M12b1 # ps alxww | more
            PID  PPID
4     0     1     0  20   0  10652   800 -      Ss   ?          0:00 init [5]  
1     0     2     0  20   0      0     0 -      S    ?          0:00 [kthreadd]
1     0     3     2  20   0      0     0 -      S    ?          0:00 [ksoftirqd/0]
...
1     0    29     2  20   0      0     0 -      S    ?          0:00 [kswapd0]
1     0    30     2  25   5      0     0 -      SN   ?          0:00 [ksmd]
1     0    31     2  39  19      0     0 -      SN   ?          0:00 [khugepaged]
1     0    32     2  20   0      0     0 -      S    ?          0:00 [fsnotify_mark]
1     0    33     2   0 -20      0     0 -      S<   ?          0:00 [crypto]
...
crypto is being started by kthreadd (the kernel thread daemon) early on in bootup. That would indicate that it's the kernel crypto module which is used by openssl, kgpg, the KDE Wallet, every modern web browser, etc. IIRC, it's also used to hash the user passwords, so the crypto service is required just to log in.
Last edited by timkb4cq on Wed Oct 15, 2014 1:55 pm, edited 1 time in total.
MSI 970A-G43 MB, AMD FX-6300 (six core), 16GB RAM, GeForce 730, Samsung 850 EVO 250GB SSD, Seagate Barracuda XT 3TB

User avatar
mmikeinsantarosa
Forum Guide
Forum Guide
Posts: 2368
Joined: Thu May 01, 2014 10:12 am

Re: crypto in MEPIS12 ?

#3 Post by mmikeinsantarosa » Wed Oct 15, 2014 1:16 pm

tim
crypto is being started by kthreadd (the kernel thread daemon) early on in bootup
How can you tell from what's in the table; what's the key?

thanks
mike
LT: MX17.1 Quad Core model: Intel Core i7-6820HQ Kernel: 4.16.0-12.1-liquorix-amd64 (64 bit)
DT: Intel(R) Core i5-3.1GHz Kernel~3.9-1-mepis64 x86_64

User avatar
timkb4cq
Forum Veteran
Forum Veteran
Posts: 4343
Joined: Wed Jul 12, 2006 4:05 pm

Re: crypto in MEPIS12 ?

#4 Post by timkb4cq » Wed Oct 15, 2014 1:54 pm

The PID is the Process ID, it starts at 1 and increments for each new process.
The PPID is the Parent's Process ID. So you see that PID 33 (crytpo) has PID 2 (kthreadd) as its parent.

man ps will show you what the other columns mean.
MSI 970A-G43 MB, AMD FX-6300 (six core), 16GB RAM, GeForce 730, Samsung 850 EVO 250GB SSD, Seagate Barracuda XT 3TB

User avatar
eemaestro
Forum Guide
Forum Guide
Posts: 1010
Joined: Wed Aug 02, 2006 12:12 pm

Re: crypto in MEPIS12 ?

#5 Post by eemaestro » Thu Oct 16, 2014 10:53 am

Thank you, timkb4cq. I feel better knowing the crypto process was started by the MEPIS12 kernel. I wonder why it doesn't end in a dee, since it is called by many different system services. I now know to check the parent process ID.

Post Reply

Return to “Security”