From owner-freebsd-questions@FreeBSD.ORG Thu Dec 4 14:38:17 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4D6BE1065673 for ; Thu, 4 Dec 2008 14:38:17 +0000 (UTC) (envelope-from tajudd@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.232]) by mx1.freebsd.org (Postfix) with ESMTP id 1B1D68FC13 for ; Thu, 4 Dec 2008 14:38:17 +0000 (UTC) (envelope-from tajudd@gmail.com) Received: by rv-out-0506.google.com with SMTP id b25so3916782rvf.43 for ; Thu, 04 Dec 2008 06:38:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type:references; bh=8wCE9Qf4ZyBTnzyAgtLFtk3SHPq1B0nfJjV2nxZw458=; b=XgXgNdhwyENrgcFhYbG641hHdNaTbca09ltWt9A+Ol2JPDgMXZQJbwpsr5MSGxwoDG RvNxbfBuC9h/eUWcLeZzXgYq98W9CiKad+ISoVN9LiJO1b7yJKwMwfTf13B1fwzJ1/VD bAGTUNXv5ssMSFwxpZ69ky4pgfu56GRknOv3A= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:references; b=fzDjPOpfODHNibmPXa04aAF5CTuRHWRDsTceaL5++MQjdiDjXkXX7oLoWIrMDeO4P0 cAWbH9Zmn+eUE5I1Kdfka2UVcLgQ/PyuZUlDf3ie54xHCX+QwprhNVUn12T1r1oRnc5J 2TUk59+eYfyBEf4PJwZkSnArGzJkWxbGixXNM= Received: by 10.141.2.18 with SMTP id e18mr6957863rvi.142.1228401496355; Thu, 04 Dec 2008 06:38:16 -0800 (PST) Received: by 10.141.128.5 with HTTP; Thu, 4 Dec 2008 06:38:16 -0800 (PST) Message-ID: Date: Thu, 4 Dec 2008 07:38:16 -0700 From: "Tim Judd" To: "Derek Ragona" In-Reply-To: <6.0.0.22.2.20081204062415.026b7c80@mail.computinginnovations.com> MIME-Version: 1.0 References: <6.0.0.22.2.20081203192259.0241ef88@mail.computinginnovations.com> <49374418.6060709@FreeBSD.org> <6.0.0.22.2.20081204062415.026b7c80@mail.computinginnovations.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Kris Kennaway , freebsd-questions@freebsd.org Subject: Re: what script is whacking root's files X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Dec 2008 14:38:17 -0000 On Thu, Dec 4, 2008 at 5:30 AM, Derek Ragona wrote: > At 01:11 AM 12/4/2008, Tim Judd wrote: > > On Wed, Dec 3, 2008 at 7:44 PM, Kris Kennaway wrote: > > > Derek Ragona wrote: > > > >> I have a freshly installed 7.0 release server. The configuration files > >> (all dot files including .ssh etc.) in /root keep getting deleted. I > >> assume this is from a script running from periodic and can be set NOT to > >> delete these files. Can someone point me where I need to make this > change. > >> I have already combed through the handbook and mailing list archives. > >> > > > > There is no such standard script in FreeBSD. > > > > Kris > > > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to " > > freebsd-questions-unsubscribe@freebsd.org" > > > > > I'd make sure there's not something like a tmpfs/mfs filesystem that /root > is being used on. If / is on a ramdisk image of any kind, on each reboot, > it should disappear. > > Perhaps you should paste your fstab and current mounted filesystems as an > aid to debug. > > > I didn't think it would be from the way the filesystems are mounted, so > here's that information: > > cat /etc/fstab > # Device Mountpoint FStype Options Dump > Pass# > /dev/da0s1b none swap sw 0 0 > /dev/da0s1a / ufs rw 1 1 > /dev/da0s1d /usr ufs rw 2 2 > /dev/acd0 /cdrom cd9660 ro,noauto 0 0 > > mount > /dev/da0s1a on / (ufs, local) > devfs on /dev (devfs, local) > /dev/da0s1d on /usr (ufs, local, soft-updates) > > /root is on /dev/da0s1a > > This particular server is running in a VM on a vmware esx 3.5 server. The > server runs fine, but every so often the dot files disappear for root. I > have not found the behavior to follow a reboot, but some period of time. > Hence my suspicions it was a periodic script. > > -Derek > all dotfiles are hidden, in terms of the usability of the files. Some shells will alias 'ls' with -a to show all files (including dotfiles). Other shells don't alias it so it hides the files. Are you sure they really disappear, or are they gone from a directory listing because ls is not being called with -(a)ll files displayed? I just think that your files are not being deleted. Something is just not being specified. Check system crontab file (/etc/crontab) and your own crontab (crontab -lu root) Change your root password, incase somebody's in there, deleting your files to hide their own tracks. chmod -R 0600 /root I agree that there isn't something "correct" about this, but i'm positive it's not a base periodic script that's included in FreeBSD Base install.