[CentOS] resolv.conf rewritten every reboot. How to figure out who and why?

Thu Oct 8 21:58:42 UTC 2009
Dave <tdbtdb+centos at gmail.com>

On Thu, Oct 8, 2009 at 11:50 AM, Dave <tdbtdb+centos at gmail.com> wrote:
> On Thu, Oct 8, 2009 at 10:29 AM, Florin Andrei <florin at andrei.myip.org> wrote:
>> What is the output of these commands?
>>
>> rpm -qa | grep dhc
>> # to see what's actually installed as a package
>
>  rpm -qa | grep dhc
> dhcpv6-client-1.0.14-1.fc9.x86_64
> libdhcp4client-4.0.0-22.fc9.x86_64
> libdhcp6client-1.0.14-1.fc9.x86_64
> libdhcp-1.99.8-1.fc9.x86_64
> dhclient-4.0.0-22.fc9.x86_64
>
>
>>
>> find / -name dhclient
>> # to see if and where is the executable installed
>
> I hope this is an acceptable substitute:
>  rpm -qfs /sbin/dhclient
> normal        /sbin/dhclient
> normal        /sbin/dhclient-script
> normal        /usr/share/doc/dhclient-4.0.0
> normal        /usr/share/doc/dhclient-4.0.0/dhclient.conf.sample
> normal        /usr/share/man/man5/dhclient.conf.5.gz
> normal        /usr/share/man/man5/dhclient.leases.5.gz
> normal        /usr/share/man/man5/dhcp-eval.5.gz
> normal        /usr/share/man/man5/dhcp-options.5.gz
> normal        /usr/share/man/man8/dhclient-script.8.gz
> normal        /usr/share/man/man8/dhclient.8.gz
> normal        /var/lib/dhclient
>
>
>>
>> grep -rI dhclient /etc | grep -v selinux | grep -v /ifup-eth: \
>>        | grep -v /ifdown-eth:
>> # to see if it's called from somewhere else than the regular places
>
> Substituting:
>  find /etc -type f -exec grep -iH dhclient {} \; | grep -v selinux
[snip]
> /etc/sysconfig/network-scripts/ifup-eth:if [ -n "${DYNCONFIG}" -a -x
> /sbin/dhclient ]; then
> /etc/sysconfig/network-scripts/ifup-eth:    # Remove any temporary
> references which were previously added to dhclient config
[snip]


Previous poster Meenoo Shivdasani was close, looks like it is
/etc/sysconfig/network-scripts/ifup-eth (not
/etc/sysconfig/network-scripts/ifup) that invokes dhclient.
Dave