topic None writable wtmp/btamp stops logging? in Operating System - HP-UX

None writable wtmp/btamp stops logging?

M.Boeijen — Mon, 27 May 2002 08:20:00 GMT

I've found several messages about trimming the btmp and wtmp file. Also removing it by a script (via cron) is an option. But I was wondering if creating the btmp and wtmp file and making it not writable is a sollution for stopping the logging permanently. Does anybody use this to prevent wtmp/btmp to fill up /var?

Re: None writable wtmp/btamp stops logging?

U.SivaKumar_2 — Mon, 27 May 2002 08:48:46 GMT

Hi,
changing wtmp , btmp permissions wont work. because syslogd runs as root.
You can try this , rename wtmp to something and
#ln -s /dev/null wtmp
regards,
U.SivaKumar

Re: None writable wtmp/btamp stops logging?

Steve Steel — Mon, 27 May 2002 10:18:54 GMT

Hi

From man btmp

Also note that wtmp and btmp are not created by the programs that maintain them.
Thus, if these files are removed, record-keeping is turned off.

I would go for keeping a rehulalrly trimmed file but according to the man page .
If you remove them there will be no more logging.

Steve Steel