Re: Averiguar qué proceso está escribiendo a disco [SOLUCIONADO]
El Miércoles, 12 de Septiembre de 2007, Iñaki Baz Castillo escribió:
> Ocurre, y esto es lo que tengo que investigar a fondo, que mi auth.log está
> todo loco:
> Sep 12 23:22:01 portatil su[19068]: (pam_unix) session opened for user ibc
> by (uid=0)
> Sep 12 23:22:01 portatil su[19068]: (pam_unix) session closed for user ibc
> Sep 12 23:22:01 portatil su[19092]: Successful su for ibc by root
> Sep 12 23:22:01 portatil su[19092]: + ??? root:ibc
> Sep 12 23:22:01 portatil su[19092]: (pam_unix) session opened for user ibc
> by (uid=0)
> Sep 12 23:22:01 portatil su[19092]: (pam_unix) session closed for user ibc
> Sep 12 23:22:01 portatil su[19116]: Successful su for ibc by root
> Sep 12 23:22:01 portatil su[19116]: + ??? root:ibc
> Sep 12 23:22:01 portatil su[19116]: (pam_unix) session opened for user ibc
> by (uid=0)
> Sep 12 23:22:01 portatil su[19116]: (pam_unix) session closed for user ibc
> Sep 12 23:22:01 portatil su[19140]: Successful su for ibc by root
> Sep 12 23:22:01 portatil su[19140]: + ??? root:ibc
> Sep 12 23:22:01 portatil su[19140]: (pam_unix) session opened for user ibc
> by (uid=0)
> Sep 12 23:22:01 portatil su[19140]: (pam_unix) session closed for user ibc
> Sep 12 23:22:01 portatil su[19164]: Successful su for ibc by root
> Sep 12 23:22:01 portatil su[19164]: + ??? root:ibc
> Sep 12 23:22:01 portatil su[19164]: (pam_unix) session opened for user ibc
> by (uid=0)
> Sep 12 23:22:01 portatil su[19164]: (pam_unix) session closed for user ibc
> Sep 12 23:22:01 portatil su[19188]: Successful su for ibc by root
> Sep 12 23:22:01 portatil su[19188]: + ??? root:ibc
> Sep 12 23:22:01 portatil su[19188]: (pam_unix) session opened for user ibc
> by (uid=0)
> Sep 12 23:22:01 portatil su[19188]: (pam_unix) session closed for user ibc
> Ahora
> el problema es averiguar porqué mi auth.log está loco.
Ya sé lo que pasa: en las nuevas versiones parece ser que cron usa PAM, así
que cada segundo se loguea. Bufff, qué chapuza... lo voy a deshabiltiar como
sea.
--
Iñaki Baz Castillo
Reply to: