HPE Community
Operating System - HP-UX
1752729 Members
5909 Online
108789 Solutions
New Discussion

Files are randomly being deleted. Need to find out what is causing this.

 
pmancillas
Visitor

‎04-20-2015 03:09 PM - last edited on ‎04-21-2015 07:01 PM by

‎04-20-2015 03:09 PM - last edited on ‎04-21-2015 07:01 PM by

Files are randomly being deleted. Need to find out what is causing this.

I have an HP-UX 11.31 server and I see that files are randomly being deleted in a service account's home directory called /home/appobiz. These are files that should not be deleted at any time by any job that is running on the server. Is there any way to determine what is causing the files to be deleted? This has happened several times during the last few months. I have checked syslog.log but it's no help. The "history" command does not show that any "rm" commands have been run for that account. Is there a log file or an auditing tool that logs when the "rm" command is executed on files in a particular directory or by a particular user?

 

 

P.S. This thread has been moved from Integrity Servers to HP-UX > sysadmin. - Hp Forum moderator

0 Kudos
Reply
1 REPLY 1
Johan Guldmyr
Honored Contributor

‎04-21-2015 04:18 AM

‎04-21-2015 04:18 AM

Re: Files are randomly being deleted. Need to find out what is causing this.

Enable auditing - http://h20565.www2.hp.com/hpsc/doc/public/display?sp4ts.oid=4164828&docId=emr_na-c02899022

 

Check cronjobs and remote logins if the home directory is not shared.

0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.