Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #234841

Re: repeated system mail, /etc/.pwd.lock ?

From David Wright <deblis@lionunicorn.co.uk>
Newsgroups linux.debian.user
Subject Re: repeated system mail, /etc/.pwd.lock ?
Date 2021-05-05 04:40 +0200
Message-ID <CbfC9-1UX-1@gated-at.bofh.it> (permalink)
References <CaWzv-7mv-1@gated-at.bofh.it> <CaYhY-8pZ-5@gated-at.bofh.it> <CaZnI-Av-5@gated-at.bofh.it> <Cbed4-17W-1@gated-at.bofh.it> <CbemJ-1b0-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Wed 05 May 2021 at 03:11:53 (+0200), Emanuel Berg wrote:
> Kushal Kumaran wrote:
> 
> > The manpage at
> > https://manpages.debian.org/buster/iwatch/iwatch.1.en.html
> > shows log output similar to what you see. Check your iwatch
> > configuration and see what it is doing.
> 
> Thanks, but I've never heard of iwatch, so I haven't mucked
> around with its config file. But OK, here it is

[ … configuration … ]

> Does that say anything to you?

It looks reasonable for determining whether your system files are
being interfered with. But you just showed one example from the
log, which was for the /etc/.pwd.lock lockfile. I assume you don't
have 2757 of these but, rather, the names of an assortment of files.

So—you're interfering with the system, by installing, removing and
reconfiguring software; people are changing their passwords, and
so on.

You might be able to correlate the timestamps of some of the changes
being made with those in logs like /var/log/apt/history*, which
shows software upgrades.

/etc/.pwd.lock is probably not a good example, as it's opened for
writing but not written to. On my system, it's the 3rd-oldest
file modification in /etc (after /etc/{shells,environment} and
before /etc/{adduser.conf,machine-id}).

BTW,

  $ aptitude why iwatch

or

  $ zgrep -B1 iwatch /var/log/apt/history.log*

might help determine why you installed iwatch.

Cheers,
David.

Back to linux.debian.user | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-04 08:20 +0200
  Re: repeated system mail, /etc/.pwd.lock ? Darac Marjal <mailinglist@darac.org.uk> - 2021-05-04 10:10 +0200
    Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-04 10:20 +0200
    Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-04 11:20 +0200
      Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 00:50 +0200
      Re: repeated system mail, /etc/.pwd.lock ? Kushal Kumaran <kushal@locationd.net> - 2021-05-05 03:10 +0200
        Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 03:20 +0200
          Re: repeated system mail, /etc/.pwd.lock ? Greg Wooledge <greg@wooledge.org> - 2021-05-05 03:40 +0200
          Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 04:40 +0200
          Re: repeated system mail, /etc/.pwd.lock ? David Wright <deblis@lionunicorn.co.uk> - 2021-05-05 04:40 +0200
            Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 04:50 +0200
              Re: repeated system mail, /etc/.pwd.lock ? David Wright <deblis@lionunicorn.co.uk> - 2021-05-05 05:10 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 05:20 +0200
            Re: repeated system mail, /etc/.pwd.lock ? Greg Wooledge <greg@wooledge.org> - 2021-05-05 13:30 +0200
              Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 16:00 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Jonathan Dowland <jon+debian-user@dow.land> - 2021-05-08 09:30 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-09 05:10 +0200
              Re: repeated system mail, /etc/.pwd.lock ? David Wright <deblis@lionunicorn.co.uk> - 2021-05-05 17:40 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 18:00 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Greg Wooledge <greg@wooledge.org> - 2021-05-05 18:10 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-05 21:30 +0200
                Re: repeated system mail, /etc/.pwd.lock ? David Wright <deblis@lionunicorn.co.uk> - 2021-05-06 05:30 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Charles Curley <charlescurley@charlescurley.com> - 2021-05-06 04:50 +0200
                Re: repeated system mail, /etc/.pwd.lock ? davidson <davidson@freevolt.org> - 2021-05-06 16:00 +0200
                OT: dotfile generalities (was Re: repeated system mail, /etc/.pwd.lock  ?) davidson <davidson@freevolt.org> - 2021-05-06 16:40 +0200
                Re: OT: dotfile generalities (was Re: repeated system mail,  /etc/.pwd.lock ?) Greg Wooledge <greg@wooledge.org> - 2021-05-06 16:50 +0200
                Re: OT: dotfile generalities (was Re: repeated system mail,  /etc/.pwd.lock ?) David Wright <deblis@lionunicorn.co.uk> - 2021-05-07 06:30 +0200
                Re: OT: dotfile generalities (was Re: repeated system mail,  /etc/.pwd.lock ?) <tomas@tuxteam.de> - 2021-05-07 09:40 +0200
                Re: OT: dotfile generalities (was Re: repeated system mail,  /etc/.pwd.lock ?) Tixy <tixy@yxit.co.uk> - 2021-05-07 10:50 +0200
                Re: OT: dotfile generalities (was Re: repeated system mail,  /etc/.pwd.lock ?) <tomas@tuxteam.de> - 2021-05-07 11:20 +0200
              Re: repeated system mail, /etc/.pwd.lock ? David Wright <deblis@lionunicorn.co.uk> - 2021-05-09 06:20 +0200
                Re: repeated system mail, /etc/.pwd.lock ? Emanuel Berg <moasenwood@zoho.eu> - 2021-05-09 12:00 +0200

csiph-web