From owner-freebsd-questions@FreeBSD.ORG Sat Jan 15 17:55:43 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id ED359106566B for ; Sat, 15 Jan 2011 17:55:43 +0000 (UTC) (envelope-from carlj@peak.org) Received: from redcondor2.peak.org (redcondor2.peak.org [69.59.192.56]) by mx1.freebsd.org (Postfix) with ESMTP id BC2E88FC08 for ; Sat, 15 Jan 2011 17:55:43 +0000 (UTC) Received: from peak-mail-gateway.peak.org ([69.59.192.42]) by redcondor2.peak.org ({6c724cae-de34-4c5f-b615-3072b86419fa}) via TCP (outbound) with ESMTP id 20110115175542514; Sat, 15 Jan 2011 17:55:42 +0000 X-RC-FROM: Received: from oak.localnet (207.55.91.159.peak.org [207.55.91.159] (may be forged)) by peak-mail-gateway.peak.org (8.12.10/8.12.8) with ESMTP id p0FHtgW7058145; Sat, 15 Jan 2011 09:55:42 -0800 (PST) Received: from oak.localnet (localhost [127.0.0.1]) by oak.localnet (Postfix) with ESMTP id 8CB7CC88D; Sat, 15 Jan 2011 09:55:41 -0800 (PST) Received: (from carlj@localhost) by oak.localnet (8.14.4/8.14.4/Submit) id p0FHtfsh051715; Sat, 15 Jan 2011 09:55:41 -0800 (PST) (envelope-from carlj@peak.org) X-Authentication-Warning: oak.localnet: carlj set sender to carlj@peak.org using -f From: Carl Johnson To: freebsd-questions@freebsd.org References: <000301cbb307$49788810$dc699830$@com> Date: Sat, 15 Jan 2011 09:55:41 -0800 In-Reply-To: (Swe Gill's message of "Thu, 13 Jan 2011 11:03:21 +0100") Message-ID: <87ipxq2grm.fsf@oak.localnet> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Swe Gill Subject: Re: httpd-modsec2_debug.log: Operation not permitted X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Jan 2011 17:55:44 -0000 Swe Gill writes: > Hi Peg > > Thanks for your help.... by applying "ls -lao"..... I get following result > > -rw------- 1 root wheel sappnd 8307655937 Jan 13 10:45 debug.log > -rw------- 1 root wheel sappnd 15415 Oct 2 2009 dmesg.today > -rw-r--r-- 1 root wheel - 0 Oct 2 2009 > httpd-access.log > -rw-r--r-- 1 root wheel - 271 Oct 2 2009 > httpd-error.log > -rw-rw---- 1 root wheel - 53969161077 Jan 13 10:45 > httpd-modsec2_audit.log > -rw-rw---- 1 root wheel - 3397158201 Jan 13 10:44 > httpd-modsec2_debug.log > -rw-r--r-- 1 root wheel sappnd 28056 Oct 2 2009 lastlog > -rw-r--r-- 1 root wheel sappnd 66 Oct 1 2009 lpd-errs > > I just don't understand why I am unable to remove the files... I don't know if you have resolved this yet, but one problem is the sappnd flag on some of the files. That flag means that those file are append-only and can't be deleted or truncated. You need to remove the sappnd flag with the command 'chflags nosappnd' for those files. I don't think that is default, so somebody had to have manually set the flag on those files. Whoever did that should have noted that, or didn't understand what the operation meant. -- Carl Johnson carlj@peak.org