Re: something is writing to /

[Chad Miller <cmiller@surfsouth.com>]

On Sun, Jul 29, 2001 at 09:38:13AM +0200, Pierfrancesco Caci wrote:
> Some package is writing temporary data and is registering devices to / 
> Please have a look at the following ls -las and see if you can
> recognize it as part of your work:
> 
> 
> root@penny:/ # ls -lasd bc* err* scc*
>    0 crw-rw----    1 root     root      51,   0 Jul 28 09:02 bc0
>    0 crw-rw----    1 root     root      51,   1 Jul 28 09:02 bc1
>    0 -rw-------    1 root     root            0 Jul 29 08:45 errs0cWf8U
>    0 -rw-------    1 root     root            0 Jul 29 08:45 errs2XdSiW
>    0 crw-rw----    1 root     root      34,   0 Jul 28 09:02 scc0
>    0 crw-rw----    1 root     root      34,   1 Jul 28 09:02 scc1

So, see what {pre,post}{inst,rm} file has an access time near 28.07,09:02.
Grep -l your apt cache dir for literal 'errsXXXXXX'.

						- chad

-- 
Chad Miller <cmiller@surfsouth.com>  | Policeman: You're playing God!
unix brujo, shutterbug, bookworm     | Dr. Hfuhruhurr: *Somebody* has to!
URL: http://web.chad.org/home/     from ``The Man with Two Brains'' (1993)