On Monday 02 December 2002 10:05 pm, [EMAIL PROTECTED] wrote:
> I tried giving normal users(not su/root) the authority to view the said
> logfile. i have place a symbolic link and that was it.
you mean a hard link, right? a symbolic link is one that was created
with "ln -s". symbolic links can be directories and can span filesystems.
hard links cannot span filesystems although if you're superuser, on linux
they can be directories (not sure about other unixen).
> I just noticed that the file grew larger and larger and i wanted to get rid
> of it. I have just uninstall the application.
/var/log/messages is still there and you think the link is still there? or
the link is still there but you deleted /var/log/messages already? if both
are still there, then (i know you've tried this already... but i state
it for completeness):
stat /var/log/messages
will give you the inode. and assuming the inode is, for instance, 12345,
then:
find / -inum 12345
will find all files that link to that inode. that's a little inefficient, you
could also just start the find at the top of the filesystem that the file
is in (since hard links can't span filesystems, they must both be on
the same filesystem, e.g., /var or [as in my case, where /var/log is
a symbolic link to /usr/local/var/log] somewhere else, e.g., /usr/local).
> > find -inum <inodenumber>
>
> Did this already but to no avail.
if that find gives you only one file then probably messages got rotated
already, or you already deleted one of the links). in which case,
messages is now using a different inode from the one you linked.
in that case, well, you'll have to find some other way (probably involving
finding all files on the disk and grepping for words that commonly appear
in /var/log/messages. e.g., i have a lot of
"CROND [1-9]*: (root) CMD"
in my /var/log/messages. so i would just grep all files on my computer for
that regexp. or you could find all files and their sizes and sort descending
on size, or something.
if you still can't find it, then maybe it's not there anymore and is no longer
a problem? :).
tiger
--
Gerald Timothy Quimpo tiger*quimpo*org gquimpo*sni-inc.com tiger*sni*ph
Public Key: "gpg --keyserver pgp.mit.edu --recv-keys 672F4C78"
Veritas liberabit vos.
Inigo Montoya: You seem a decent fellow, I hate to kill you.
Westley: You seem a decent fellow, I hate to die.
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
