Is it normal to have rtkit - daemon running ?

[johnhoffmann]

I am no expert and heard about installation of a rootkit by hackers. So I wanted to ask you: when I do a ps -ef I find this porcess:


rtkit 1736 1 0 15:54 ? 00:00:00 /usr/libexec/rtkit-daemon


Is this a normal process in fedora 12 , or I somebody hacked my server ?


Thanks

john

[PabloTwo]

Yes, it's normal.

BASH:~/-> rpm -qf /usr/libexec/rtkit-daemon
rtkit-0.4-1.fc12.i686
BASH:~/-> rpm -qi rtkit
Name        : rtkit                        Relocations: (not relocatable)
Version     : 0.4                               Vendor: Fedora Project
Release     : 1.fc12                        Build Date: Tue 04 Aug 2009 09:53:30 PM EDT
Install Date: Tue 10 Nov 2009 02:39:12 PM EST      Build Host: x86-2.fedora.phx.redhat.com
Group       : System Environment/Base       Source RPM: rtkit-0.4-1.fc12.src.rpm
Size        : 109020                           License: GPLv3+ and BSD
Signature   : RSA/SHA1, Mon 10 Aug 2009 12:00:18 AM EDT, Key ID 9d1cc34857bbccba
Packager    : Fedora Project
URL         : http://git.0pointer.de/?p=rtkit.git
Summary     : Realtime Policy and Watchdog Daemon
Description :
RealtimeKit is a D-Bus system service that changes the
scheduling policy of user processes/threads to SCHED_RR (i.e. realtime
scheduling mode) on request. It is intended to be used as a secure
mechanism to allow real-time scheduling to be used by normal user
processes.

[johnhoffmann]

Thanks, will connect the server back to the internet !!

[vallimar]

AFAIK, it's only installed and used by pulseaudio presently.

[PabloTwo]

@vallimar, interesting piece of info. I checked the "requires" of pulseaudio and, sure enough, rtkit is in the list.

BASH:~/-> rpm -q --requires pulseaudio | grep rtkit
rtkit

[guzenkov]

This command is probably more appropriate as it will show all the installed package that require rtkit as a dependency:

# rpm -q --whatrequires rtkit
pulseaudio-0.9.21-14.el6_3.x86_64

[donnielinkedin]

rtkit is

RealtimeKit is a D-Bus system service that changes the
scheduling policy of user processes/threads to SCHED_RR
(i.e. realtime scheduling mode) on request. It is intended to
be used as a secure mechanism to allow real-time scheduling to
be used by normal user processes.
Original-Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org>
Homepage: http://0pointer.de/public/

[Smit-Tay]

In other words, it should not be running by default.

Running processes in real time is only necessary under very special circumstances - the vast majority of people don't even understand what real-time means.

It is yet example of service being run unnecessarily