> > Hi, > > I have noticed that when updating a package, I don't know which one yet, > that's why I'm asking..., "unknown" sub directories in /var/log/ gets owned > by root. This is terrible because I have for example my qmail logs in there, > and they are owned by "qmaill", as in: > > cat /service/qmail/log/run > #!/bin/sh > PATH="/sbin:/usr/sbin:/bin:/usr/bin:/var/qmail/bin:/usr/local/bin:$PATH" > exec setuidgid qmaill multilog t /var/log/qmail > > Who's changing owner on /var/log ? >
cd /etc/security/msec grep /var/log * -andrej
