Re: what script is whacking root's files

2008-12-08 Thread Derek Ragona

At 11:33 AM 12/4/2008, Giorgos Keramidas wrote:
On Thu, 04 Dec 2008 06:30:13 -0600, Derek Ragona 
[EMAIL PROTECTED] wrote:

 /root is on /dev/da0s1a

 This particular server is running in a VM on a vmware esx 3.5 server.
 The server runs fine, but every so often the dot files disappear for
 root.  I have not found the behavior to follow a reboot, but some period
 of time.  Hence my suspicions it was a periodic script.

Check your crontab jobs then.

  * Do you have any local changes to the system crontab in
`/etc/crontab'?  If yes, what are those changes, and what do the
scripts or other commands they run look like?

  * Do you have a user-specific crontab file for `root' in
`/var/cron/tabs/root'?  If yes what does it contain?

___


Thank you to everyone who made great suggestions.  I found the errant 
script, and it was running out of a cron entry to clean up old mailscanner 
files.  It seems if the directories in the script didn't all exist, and a 
cd failed, it left the script running in /root.  I have since corrected the 
script to test for the directories existence first.


But this was a case of can't see the forest for the trees and I do 
appreciate all the help and suggestions.


-Derek

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what script is whacking root's files

2008-12-04 Thread Derek Ragona

At 01:11 AM 12/4/2008, Tim Judd wrote:

On Wed, Dec 3, 2008 at 7:44 PM, Kris Kennaway [EMAIL PROTECTED] wrote:

 Derek Ragona wrote:

 I have a freshly installed 7.0 release server.  The configuration files
 (all dot files including .ssh  etc.) in /root keep getting deleted.  I
 assume this is from a script running from periodic and can be set NOT to
 delete these files.  Can someone point me where I need to make this 
change.

  I have already combed through the handbook and mailing list archives.


 There is no such standard script in FreeBSD.

 Kris

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]



I'd make sure there's not something like a tmpfs/mfs filesystem that /root
is being used on.  If / is on a ramdisk image of any kind, on each reboot,
it should disappear.

Perhaps you should paste your fstab and current mounted filesystems as an
aid to debug.


I didn't think it would be from the way the filesystems are mounted, so 
here's that information:


cat /etc/fstab
# DeviceMountpoint  FStype  Options DumpPass#
/dev/da0s1b noneswapsw  0   0
/dev/da0s1a /   ufs rw  1   1
/dev/da0s1d /usrufs rw  2   2
/dev/acd0   /cdrom  cd9660  ro,noauto   0   0

 mount
/dev/da0s1a on / (ufs, local)
devfs on /dev (devfs, local)
/dev/da0s1d on /usr (ufs, local, soft-updates)

/root is on /dev/da0s1a

This particular server is running in a VM on a vmware esx 3.5 server.  The 
server runs fine, but every so often the dot files disappear for root.  I 
have not found the behavior to follow a reboot, but some period of 
time.  Hence my suspicions it was a periodic script.


-Derek

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what script is whacking root's files

2008-12-04 Thread Tim Judd
On Thu, Dec 4, 2008 at 5:30 AM, Derek Ragona [EMAIL PROTECTED]
 wrote:

  At 01:11 AM 12/4/2008, Tim Judd wrote:

 On Wed, Dec 3, 2008 at 7:44 PM, Kris Kennaway [EMAIL PROTECTED] wrote:

  Derek Ragona wrote:
 
  I have a freshly installed 7.0 release server.  The configuration files
  (all dot files including .ssh  etc.) in /root keep getting deleted.  I
  assume this is from a script running from periodic and can be set NOT to
  delete these files.  Can someone point me where I need to make this
 change.
   I have already combed through the handbook and mailing list archives.
 
 
  There is no such standard script in FreeBSD.
 
  Kris
 
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
  [EMAIL PROTECTED]
 


 I'd make sure there's not something like a tmpfs/mfs filesystem that /root
 is being used on.  If / is on a ramdisk image of any kind, on each reboot,
 it should disappear.

 Perhaps you should paste your fstab and current mounted filesystems as an
 aid to debug.


 I didn't think it would be from the way the filesystems are mounted, so
 here's that information:

 cat /etc/fstab
 # DeviceMountpoint  FStype  Options Dump
 Pass#
 /dev/da0s1b noneswapsw  0   0
 /dev/da0s1a /   ufs rw  1   1
 /dev/da0s1d /usrufs rw  2   2
 /dev/acd0   /cdrom  cd9660  ro,noauto   0   0

  mount
 /dev/da0s1a on / (ufs, local)
 devfs on /dev (devfs, local)
 /dev/da0s1d on /usr (ufs, local, soft-updates)

 /root is on /dev/da0s1a

 This particular server is running in a VM on a vmware esx 3.5 server.  The
 server runs fine, but every so often the dot files disappear for root.  I
 have not found the behavior to follow a reboot, but some period of time.
 Hence my suspicions it was a periodic script.

 -Derek



all dotfiles are hidden, in terms of the usability of the files.  Some
shells will alias 'ls' with -a to show all files (including dotfiles).
Other shells don't alias it so it hides the files.

Are you sure they really disappear, or are they gone from a directory
listing because ls is not being called with -(a)ll files displayed?

I just think that your files are not being deleted.  Something is just not
being specified.

Check system crontab file (/etc/crontab) and your own crontab (crontab -lu
root)
Change your root password, incase somebody's in there, deleting your files
to hide their own tracks.

chmod -R 0600 /root

I agree that there isn't something correct about this, but i'm positive
it's not a base periodic script that's included in FreeBSD Base install.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what script is whacking root's files

2008-12-04 Thread Ivan Voras
Derek Ragona wrote:

 This particular server is running in a VM on a vmware esx 3.5 server. 
 The server runs fine, but every so often the dot files disappear for
 root.  I have not found the behavior to follow a reboot, but some period
 of time.  Hence my suspicions it was a periodic script.
 

Are you sure the vmware server doesn't periodically (or on reboot,
perhaps?) revert the disk's content to an earlier snapshot?



signature.asc
Description: OpenPGP digital signature


Re: what script is whacking root's files

2008-12-04 Thread Giorgos Keramidas
On Thu, 04 Dec 2008 06:30:13 -0600, Derek Ragona [EMAIL PROTECTED] wrote:
 /root is on /dev/da0s1a

 This particular server is running in a VM on a vmware esx 3.5 server.
 The server runs fine, but every so often the dot files disappear for
 root.  I have not found the behavior to follow a reboot, but some period
 of time.  Hence my suspicions it was a periodic script.

Check your crontab jobs then.

  * Do you have any local changes to the system crontab in
`/etc/crontab'?  If yes, what are those changes, and what do the
scripts or other commands they run look like?

  * Do you have a user-specific crontab file for `root' in
`/var/cron/tabs/root'?  If yes what does it contain?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what script is whacking root's files

2008-12-03 Thread Kris Kennaway

Derek Ragona wrote:
I have a freshly installed 7.0 release server.  The configuration files 
(all dot files including .ssh  etc.) in /root keep getting deleted.  I 
assume this is from a script running from periodic and can be set NOT to 
delete these files.  Can someone point me where I need to make this 
change.  I have already combed through the handbook and mailing list 
archives.


There is no such standard script in FreeBSD.

Kris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what script is whacking root's files

2008-12-03 Thread Tim Judd
On Wed, Dec 3, 2008 at 7:44 PM, Kris Kennaway [EMAIL PROTECTED] wrote:

 Derek Ragona wrote:

 I have a freshly installed 7.0 release server.  The configuration files
 (all dot files including .ssh  etc.) in /root keep getting deleted.  I
 assume this is from a script running from periodic and can be set NOT to
 delete these files.  Can someone point me where I need to make this change.
  I have already combed through the handbook and mailing list archives.


 There is no such standard script in FreeBSD.

 Kris

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]



I'd make sure there's not something like a tmpfs/mfs filesystem that /root
is being used on.  If / is on a ramdisk image of any kind, on each reboot,
it should disappear.

Perhaps you should paste your fstab and current mounted filesystems as an
aid to debug.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]