A weird behavior on my laptop: directories /usr/local/var/log
/usr/local/var/logs created by root get deleted a few minutes afterwards.

How can i discover what process is to blame?

thank you
---P

--
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo [at] vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

xPol wrote:

> A weird behavior on my laptop: directories /usr/local/var/log
> /usr/local/var/logs created by root get deleted a few minutes afterwards.
>
> How can i discover what process is to blame?

One possibility is to create a file in that directory with the
immutable attribute ("chattr +i ...") and see if anything shows up in
the system log files.

--
Glynn Clements <glynn [at] gclements.plus.com>
--
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo [at] vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

xPol wrote:
> A weird behavior on my laptop: directories /usr/local/var/log
> /usr/local/var/logs created by root get deleted a few minutes afterwards.
>
> How can i discover what process is to blame?

Have you gone through all the cron jobs to see what's scheduled to run?

Tom Corwine
--
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo [at] vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

2009/12/27 Glynn Clements <glynn [at] gclements.plus.com>
>
> xPol wrote:
>
> > A weird behavior on my laptop: =A0directories /usr/local/var/log
> > /usr/local/var/logs created by root get deleted a few minutes after=
wards.
> >
> > How can i discover what process is to blame?
>
> One possibility is to create a file in that directory with the
> immutable attribute ("chattr +i ...") and see if anything shows up in
> the system log files.
>
> --
> Glynn Clements <glynn [at] gclements.plus.com>
> --
> To unsubscribe from this list: send the line "unsubscribe linux-admin=
" in
> the body of a message to majordomo [at] vger.kernel.org
> More majordomo info at =A0http://vger.kernel.org/majordomo-info.html

Another possibility is to write wrapper scripts round the rm , rmdir,
and unlink commands, which write "who am i" and "pstree $$" output to
a file before executing the actual rm, rmdir or unlink.

Kind regards,

Herta

--
"Life on Earth may be expensive,
but it comes with a free ride around the Sun."
--
To unsubscribe from this list: send the line "unsubscribe linux-admin" =
in
the body of a message to majordomo [at] vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html