Re: Ghost cronjob
Stefan Monnier <monnier@iro.umontreal.ca> writes:
>> root@galahad:~# grep btrbk /etc/ -rl
>
> Have you `grep`d in `/var/` as well?
> [ E.g. `/var/spool/crontabs` ]
>
Yep, nothing there, aside from the usual suspects (apt & dpkg files).
>> And yet I find this in /var/log/btrbk.log:
>>
>> 2017-03-12T20:16:28+0100 startup v0.24.0 - - - - # btrbk command line client, version 0.24.0
>
> Any other mention of activity around that time in some other log file?
>
>
Not that I can see. I am going to see what patching btrbk to log PPID
shows up tonight.
Mart
--
"We will need a longer wall when the revolution comes."
--- AJS, quoting an uncertain source.
Reply to: