On Sunday 20 July 2008 22:31:22 John Horne wrote:
On Sun, 2008-07-20 at 22:04 +0100, Anne Wilson wrote:
On Sunday 20 July 2008 21:23:52 Stephen Harris wrote:
What does find /var/spool/cron -type f ! -size 0 show?
Does that mean 'not = size 0'?
Yes.
I can't think of anything that explains this. I have a 6-month-old CentOS 5.2 install, with nothing out of the ordinary, as far as I can recall.
Your previous message showed:
-rw------- 1 root root 0 Jul 7 16:07 /var/spool/cron/nobody
This will be the last modification date/time, and possibly the creation date/time if the file was not modified at all. So something around July 7 presumably caused it. If you have the old /var/log/messages files from around that date, then looking through those might show something. As might a /var/log/yum.log file which could indicate if something was automatically installed.
/var/log/yum.log shows nothing between 3rd and 11th June.
Jun 03 16:04:30 Updated: commoncpp2.i386 1.6.2-1.el5.rf Jun 11 17:33:22 Updated: clamav-db.i386 0.93.1-1.el5.rf Jun 11 17:33:28 Updated: clamav.i386 0.93.1-1.el5.rf Jun 11 17:33:29 Updated: clamd.i386 0.93.1-1.el5.rf
The oldest /var/log/messages only goes back to June 22.
Anne