From owner-freebsd-questions@FreeBSD.ORG  Thu Dec  4 17:34:26 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D774C1065673
	for <freebsd-questions@freebsd.org>;
	Thu,  4 Dec 2008 17:34:26 +0000 (UTC)
	(envelope-from keramida@ceid.upatras.gr)
Received: from igloo.linux.gr (igloo.linux.gr [62.1.205.36])
	by mx1.freebsd.org (Postfix) with ESMTP id 1BCA98FC18
	for <freebsd-questions@freebsd.org>;
	Thu,  4 Dec 2008 17:34:25 +0000 (UTC)
	(envelope-from keramida@ceid.upatras.gr)
Received: from kobe.laptop (adsl37-141.kln.forthnet.gr [77.49.164.141])
	(authenticated bits=128)
	by igloo.linux.gr (8.14.3/8.14.3/Debian-5) with ESMTP id mB4HY2X3027803
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
	Thu, 4 Dec 2008 19:34:08 +0200
Received: from kobe.laptop (kobe.laptop [127.0.0.1])
	by kobe.laptop (8.14.3/8.14.3) with ESMTP id mB4HXwdW005256;
	Thu, 4 Dec 2008 19:33:58 +0200 (EET)
	(envelope-from keramida@ceid.upatras.gr)
Received: (from keramida@localhost)
	by kobe.laptop (8.14.3/8.14.3/Submit) id mB4HXvfU005255;
	Thu, 4 Dec 2008 19:33:57 +0200 (EET)
	(envelope-from keramida@ceid.upatras.gr)
From: Giorgos Keramidas <keramida@ceid.upatras.gr>
To: Derek Ragona <derek@computinginnovations.com>
References: <6.0.0.22.2.20081203192259.0241ef88@mail.computinginnovations.com>
	<49374418.6060709@FreeBSD.org>
	<ade45ae90812032311v47e92cf2g30bc3e2915d38276@mail.gmail.com>
	<6.0.0.22.2.20081204062415.026b7c80@mail.computinginnovations.com>
Date: Thu, 04 Dec 2008 19:33:56 +0200
In-Reply-To: <6.0.0.22.2.20081204062415.026b7c80@mail.computinginnovations.com>
	(Derek Ragona's message of "Thu, 04 Dec 2008 06:30:13 -0600")
Message-ID: <87tz9jzvy3.fsf@kobe.laptop>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.0.60 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-MailScanner-ID: mB4HY2X3027803
X-Hellug-MailScanner: Found to be clean
X-Hellug-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
	score=-3.858, required 5, autolearn=not spam, ALL_TRUSTED -1.80,
	AWL 0.54, BAYES_00 -2.60)
X-Hellug-MailScanner-From: keramida@ceid.upatras.gr
X-Spam-Status: No
Cc: Tim Judd <tajudd@gmail.com>, Kris Kennaway <kris@freebsd.org>,
	freebsd-questions@freebsd.org
Subject: Re: what script is whacking root's files
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Dec 2008 17:34:26 -0000

On Thu, 04 Dec 2008 06:30:13 -0600, Derek Ragona <derek@computinginnovations.com> wrote:
> /root is on /dev/da0s1a
>
> This particular server is running in a VM on a vmware esx 3.5 server.
> The server runs fine, but every so often the dot files disappear for
> root.  I have not found the behavior to follow a reboot, but some period
> of time.  Hence my suspicions it was a periodic script.

Check your crontab jobs then.

  * Do you have any local changes to the system crontab in
    `/etc/crontab'?  If yes, what are those changes, and what do the
    scripts or other commands they run look like?

  * Do you have a user-specific crontab file for `root' in
    `/var/cron/tabs/root'?  If yes what does it contain?