Re: repeated system mail, /etc/.pwd.lock ?

[Emanuel Berg <moasenwood@zoho.eu>]

Kushal Kumaran wrote:

> The manpage at
> https://manpages.debian.org/buster/iwatch/iwatch.1.en.html
> shows log output similar to what you see. Check your iwatch
> configuration and see what it is doing.

Thanks, but I've never heard of iwatch, so I haven't mucked
around with its config file. But OK, here it is

<?xml version="1.0" ?>
<!DOCTYPE config SYSTEM "/etc/iwatch/iwatch.dtd" >

<config charset="utf-8">
  <guard email="iwatch@localhost" name="iWatch"/>
  <watchlist>
    <title>Operating System</title>
    <contactpoint email="root@localhost" name="Administrator"/>
    <path type="single" syslog="on">/bin</path>
    <path type="single" syslog="on">/sbin</path>
    <path type="single">/etc</path>
    <path type="recursive">/lib</path>
    <path type="exception">/lib/modules</path>
  </watchlist>
</config>

Does that say anything to you?

-- 
underground experts united
https://dataswamp.org/~incal