I’m using Enterprise 2.2.0.p25 checkmk on Linux hosts and most are auto-updating agents.
Sometimes rarely, this happens on a host. It’s a random named directory on each host.
/usr/lib/check_mk_agent
drwxr-xr-x. 5 root root 52 Feb 4 16:13 ./
dr-xr-xr-x. 37 root root 4096 Sep 2 03:30 ../
drwxr-xr-x. 3 root root 56 Jan 28 20:09 local/
drwx------. 5 root root 4096 Aug 17 07:59 _MEINzR8gV/ !!! what is this?
drwxr-xr-x. 3 root root 55 Jan 28 20:09 plugins/
I’ve had system owners notice this before, when they have other monitoring in place that checks for any files that aren’t expected. It contains python libraries having to do with cryptography. Nothing happens when I delete the mystery directory.
Does anyone know why? Is it something with agent install/update that should be cleaned up but isn’t? Is there is anything I can do to prevent it from happening?