> On my Centos 5 server, the secure file has not updated > since Dec 10. This despite the fact that I run an > sshd server that I access many times per day. Most > peculiar is the fact that a swatch monitor that I run > on the secure file catches plenty of lines. It is > as if when swatch catches a line in the file, the line > is removed from the file and the modification date > is set back. Hard to believe. Any ideas?
What is the output of "lsattr /var/log/secure"? Do you have SELinux enabled, and are there any corresponding lines in /var/log/audit/audit.log? _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
