[CentOS] secure file not updating

Barry Brimer lists at brimer.org
Sat Dec 13 04:43:46 UTC 2008


> On my Centos 5 server, the secure file has not updated
> since Dec 10.  This despite the fact that I run an
> sshd server that I access many times per day.  Most
> peculiar is the fact that a swatch monitor that I run
> on the secure file catches plenty of lines.  It is
> as if when swatch catches a line in the file, the line
> is removed from the file and the modification date
> is set back.  Hard to believe.  Any ideas?

What is the output of "lsattr /var/log/secure"?  Do you have SELinux 
enabled, and are there any corresponding lines in 
/var/log/audit/audit.log?


More information about the CentOS mailing list