On Wednesday, 25 March 2020 3:23:55 PM AEDT Michael Biebl wrote: > > root@sevm:~# grep dele /proc/293/maps > > 7fca8e8ef000-7fca8f0ef000 rw-s 00000000 00:15 2013277 > > /var/ log/journal/68f1b89bf8c73b0ed9ed905f535fa641/ > > user-1002@6cf63a35b84c49e8b4fc99b777fb7629-0000000000000000-00000000000000 > > 00.journal (deleted) > > Can you find out, how the file was deleted?
systemd-journald just decided to do it. I'll put in an audit entry to get an audit log of it. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/