[CentOS] secure file not updating
Barry Brimer
lists at brimer.org
Sat Dec 13 04:43:46 UTC 2008
> On my Centos 5 server, the secure file has not updated
> since Dec 10. This despite the fact that I run an
> sshd server that I access many times per day. Most
> peculiar is the fact that a swatch monitor that I run
> on the secure file catches plenty of lines. It is
> as if when swatch catches a line in the file, the line
> is removed from the file and the modification date
> is set back. Hard to believe. Any ideas?
What is the output of "lsattr /var/log/secure"? Do you have SELinux
enabled, and are there any corresponding lines in
/var/log/audit/audit.log?
More information about the CentOS
mailing list