topic Re: /home increases whenever user logins in Operating System - Linux

/home increases whenever user logins

Sidney_9 — Mon, 13 Jun 2005 14:14:20 GMT

Hi all,

My /home directory is 100% full and I found out that whenever I login, logout and login again to the Unix system, my /home directory will increases a bit.

Is there a log file where it will record the users login? Where is it located at? Could I delete or disable that log file?

Appreciate any advice. Thank you!

Re: /home increases whenever user logins

Denver Osborn — Mon, 13 Jun 2005 16:09:17 GMT

I can't think of anything system related that would be logging to /home. Is /home it's own filesystem?

df /home

To narrow it down, run du, then login/logout/login again then run du again. compare the du output to see what's increased.

du -sk ~/* |sort -n

Also, is this a gradual increase over time or a significant increase?

-denver

Re: /home increases whenever user logins

Rick Garland — Mon, 13 Jun 2005 17:03:31 GMT

There is the .bash_history file. Keeps a history of what you have done.

Re: /home increases whenever user logins

Stuart Browne — Mon, 13 Jun 2005 17:43:19 GMT

When a user logs in, normally nothing will be written to the users home directory.

A login will spawn off a number (about 3-4) messages via Syslog (which would normally be logged to /var/log), and an entry in the 'utmp' (which is usually in /var/run).

If you're getting a sudden increase whenever a user logs in, you'll need to walk through all of '/etc/profile', '/etc/bashrc' and the users '~/.bash_login'.

There will be some erroneous line in there which is causing a space loss.

Re: /home increases whenever user logins

xyko_1 — Tue, 14 Jun 2005 07:28:27 GMT

Hi Sidney,

do you have any mailbox on your home director ?

If you are receiving mails and you are not deleting it, your mailbox will increase.

regards,
xyko

Re: /home increases whenever user logins

Sidney_9 — Tue, 14 Jun 2005 07:52:50 GMT

Hi all,

I will check the things you suggested.

Thank you very much for your help!

Re: /home increases whenever user logins

Ross Minkov — Tue, 14 Jun 2005 13:07:54 GMT

Sidney,

Try the following commands: last and lastb. The difference between last and lastb is that last command displays all users logged into a system along with their current ttys and lastb only displays all bad login attempts provided that the /var/log/btmp file exists.

If you don't find anything else you might want to try to check for root kits. It is possible that might have a compromised system. See http://www.chkrootkit.org

Also if you have tripwire installed and configured now is the time to use it.

-Ross

Re: /home increases whenever user logins

Gopi Sekar — Wed, 15 Jun 2005 00:47:52 GMT

check the partition on which /home resides, if it contains few other directories also (eg: /var/log) then increase in them will reflect the hard disk remaining size

only .bash_history is appended automatically when a user logs in and logs out, other files getting bigger could be based on custom applications running in .profile file in user home directory

Regards,
Gopi

Re: /home increases whenever user logins

Steven E. Protter — Wed, 15 Jun 2005 01:28:16 GMT

It really depend what kind of login script you have for the user.

By default, only keystrokes get written to the home directory. If however you are using this sever to replace a windows PDC, you may have lots of things being written to the home directory.

I'd say, tell us what files are created or increase when you log in. Then I can give you a judgement as to whats going on.

SEP