System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Files are randomly being deleted. Need to find out what is causing this.

pmancillas
Visitor

Files are randomly being deleted. Need to find out what is causing this.

I have an HP-UX 11.31 server and I see that files are randomly being deleted in a service account's home directory called /home/appobiz. These are files that should not be deleted at any time by any job that is running on the server. Is there any way to determine what is causing the files to be deleted? This has happened several times during the last few months. I have checked syslog.log but it's no help. The "history" command does not show that any "rm" commands have been run for that account. Is there a log file or an auditing tool that logs when the "rm" command is executed on files in a particular directory or by a particular user?

 

 

P.S. This thread has been moved from Integrity Servers to HP-UX > sysadmin. - Hp Forum moderator

1 REPLY
Johan Guldmyr
Honored Contributor

Re: Files are randomly being deleted. Need to find out what is causing this.

Enable auditing - http://h20565.www2.hp.com/hpsc/doc/public/display?sp4ts.oid=4164828&docId=emr_na-c02899022

 

Check cronjobs and remote logins if the home directory is not shared.