On Thu, Mar 09, 2006 at 12:37:06PM -0500, Justin Pryzby wrote: > Something like strace -f -o /var/log/ssh-strace/ssh-strace.log, where > you should be able to set the directory permissions to be sufficiently > tight. Okay, I'm now running: $ sudo strace -ff -o /var/log/ssh-strace/ssh-strace.log /usr/sbin/sshd But after only a couple of minutes all these files have been created: $ sudo ls -lah /var/log/ssh-strace/ total 3.2M drwx------ 2 root root 3.0K Apr 14 15:54 . drwxr-xr-x 10 root root 2.0K Apr 14 06:30 .. -rw-r--r-- 1 root root 87K Apr 14 15:54 ssh-strace.log -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15527 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15528 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15529 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15530 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15531 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15532 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15533 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15534 -rw-r--r-- 1 root root 75K Apr 14 15:52 ssh-strace.log.15535 -rw-r--r-- 1 root root 6.0K Apr 14 15:51 ssh-strace.log.15536 -rw-r--r-- 1 root root 2.2K Apr 14 15:51 ssh-strace.log.15537 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15538 -rw-r--r-- 1 root root 5.3K Apr 14 15:51 ssh-strace.log.15539 -rw-r--r-- 1 root root 57K Apr 14 15:52 ssh-strace.log.15540 -rw-r--r-- 1 root root 76K Apr 14 15:52 ssh-strace.log.15541 -rw-r--r-- 1 root root 2.4K Apr 14 15:51 ssh-strace.log.15542 -rw-r--r-- 1 root root 17K Apr 14 15:51 ssh-strace.log.15543 -rw-r--r-- 1 root root 2.4K Apr 14 15:51 ssh-strace.log.15544 -rw-r--r-- 1 root root 2.3K Apr 14 15:51 ssh-strace.log.15545 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15546 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15547 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15548 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15549 -rw-r--r-- 1 root root 3.4K Apr 14 15:51 ssh-strace.log.15550 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15551 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15552 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15553 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15554 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15555 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15556 -rw-r--r-- 1 root root 56K Apr 14 15:51 ssh-strace.log.15557 -rw-r--r-- 1 root root 5.2K Apr 14 15:51 ssh-strace.log.15558 -rw-r--r-- 1 root root 39K Apr 14 15:52 ssh-strace.log.15559 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15560 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15561 -rw-r--r-- 1 root root 94K Apr 14 15:52 ssh-strace.log.15562 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15563 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15564 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15565 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15566 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15567 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15568 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15569 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15570 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15573 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15575 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15576 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15577 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15578 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15579 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15581 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15582 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15583 -rw-r--r-- 1 root root 5.3K Apr 14 15:52 ssh-strace.log.15584 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15585 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15586 -rw-r--r-- 1 root root 56K Apr 14 15:52 ssh-strace.log.15587 -rw-r--r-- 1 root root 5.2K Apr 14 15:52 ssh-strace.log.15588 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15589 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15590 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15591 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15592 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15593 -rw-r--r-- 1 root root 5.3K Apr 14 15:53 ssh-strace.log.15594 -rw-r--r-- 1 root root 44K Apr 14 15:53 ssh-strace.log.15595 -rw-r--r-- 1 root root 2.5K Apr 14 15:53 ssh-strace.log.15596 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15597 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15598 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15599 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15600 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15601 -rw-r--r-- 1 root root 5.3K Apr 14 15:53 ssh-strace.log.15602 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15603 -rw-r--r-- 1 root root 5.3K Apr 14 15:53 ssh-strace.log.15604 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15605 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15606 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15608 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15609 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15611 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15612 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15613 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15614 -rw-r--r-- 1 root root 56K Apr 14 15:53 ssh-strace.log.15615 -rw-r--r-- 1 root root 5.2K Apr 14 15:53 ssh-strace.log.15616 -rw-r--r-- 1 root root 56K Apr 14 15:54 ssh-strace.log.15617 -rw-r--r-- 1 root root 5.2K Apr 14 15:54 ssh-strace.log.15618 -rw-r--r-- 1 root root 56K Apr 14 15:54 ssh-strace.log.15619 -rw-r--r-- 1 root root 5.2K Apr 14 15:54 ssh-strace.log.15623 -rw-r--r-- 1 root root 56K Apr 14 15:54 ssh-strace.log.15625 -rw-r--r-- 1 root root 5.2K Apr 14 15:54 ssh-strace.log.15626 -rw-r--r-- 1 root root 56K Apr 14 15:54 ssh-strace.log.15627 -rw-r--r-- 1 root root 5.2K Apr 14 15:54 ssh-strace.log.15628 -rw-r--r-- 1 root root 56K Apr 14 15:54 ssh-strace.log.15629 -rw-r--r-- 1 root root 5.2K Apr 14 15:54 ssh-strace.log.15630 -rw-r--r-- 1 root root 56K Apr 14 15:54 ssh-strace.log.15631 -rw-r--r-- 1 root root 5.2K Apr 14 15:54 ssh-strace.log.15632 -rw-r--r-- 1 root root 56K Apr 14 15:54 ssh-strace.log.15633 -rw-r--r-- 1 root root 5.2K Apr 14 15:54 ssh-strace.log.15634 -rw-r--r-- 1 root root 44K Apr 14 15:54 ssh-strace.log.15636 -rw-r--r-- 1 root root 2.0K Apr 14 15:54 ssh-strace.log.15637 so I'm a bit concerned I'm going to run out of disk space. Can I delete files older than a day, daily, if I have not had a reoccurance of the problem? And yes I am also aware I need to adjust my umask to stop them being world readable. Cheers, Andy
Attachment:
signature.asc
Description: Digital signature