bash and whoami caused a 0 passwd file

[trpjr1]

Superdome (SD32) running HP-UX 11.11 and user uses bash 2.05b for startup script. When they changed their password and did whoami the password file compressed to 0 and I think / filled up. I could only reboot to single user mode and take a copy of a backed up passwd file to get the partition active. Would what they did cause the / to fill or passwd file to compress to 0? I have a small /. /dev/vg00/lvol3 204800 189192 15608 92% /

[Bharat Katkar]

It all depends on what is there in that scirpt which was executed.

Normally what happen if you try to backup the data to backup device which is not existing then entire data goes in to that file which resides under /dev which is part of your root.

Another reason would be somebody by mistake copied a huge file on root. You can use find command to locate the files with big sizes.

Regards,

[Ivan Ferreira]

You can use:

find / -xdev -type f -exec ls -la {} \; |sort +5 -nrb

find / -xdev -type f -ls |sort +6 -nrb

To find out if there is a bigfile out of place.


Are you sure that the passwd file was modified when you issued the whoami command?