Hi. On Mon, 25 Apr 2016 22:38:47 +0200 Michael Luecke <ml2...@mluecke.eu> wrote:
So, it all goes well, until it hits the wall: > > Please post the output of: > ... > > rename("/etc/group+", "/etc/group") = -1 EBUSY (Device or resource busy) And this is another thing that could be useful to the future searches of the archives: > # mount ... > /dev/sda3 on / type btrfs (rw,noatime,ssd,space_cache) > ++++++++++++++++++++++++++++++ > # dmesg | tail ... Does not have any scary 'force mounting / read-only', so it should be all good. > # lsattr /etc/group > ---------------- /etc/group And no extended attributes (or SELinux, which is confirmed by strace output) come into play. So it all boils down to one failing syscall - rename(2). The manpage does not cover such case - it talks about returning EBUSY if the source or the target of rename are mountpoints (clearly not the case here). So, let's start with something simple: /bin/fuser /etc/group /usr/bin/lsof /etc/group Reco