Quote:
This leads to my suspect: a faulty parent. The parent process, when overloaded or something, is spawning children incorrectly
It really seems like that's the problem. We're still narrowing down any patterns, but it here's any consistency we've found so far.
Roughly 11:00 pm - consistently wrong permissions
5:00 pm - 6:00 pm - consistently wrong permissions
10:00 am - 10:30 am - not as consistent as 5-6, but still pretty bad
Maybe the parent is being hit with another process on the server at these times, and is causing it to do what you described above.
We don't have any crons running at these times. I'm using top during these times to try to find any wierd processes, but have been unsuccesfull. I'll start looking into the parent for .cgi's and see if I can find something.
Thanks.