Operating System - HP-UX
1834740 Members
3512 Online
110070 Solutions
New Discussion

None writable wtmp/btamp stops logging?

 
M.Boeijen
Advisor

None writable wtmp/btamp stops logging?

I've found several messages about trimming the btmp and wtmp file. Also removing it by a script (via cron) is an option. But I was wondering if creating the btmp and wtmp file and making it not writable is a sollution for stopping the logging permanently. Does anybody use this to prevent wtmp/btmp to fill up /var?
2 REPLIES 2
U.SivaKumar_2
Honored Contributor

Re: None writable wtmp/btamp stops logging?

Hi,
changing wtmp , btmp permissions wont work. because syslogd runs as root.
You can try this , rename wtmp to something and
#ln -s /dev/null wtmp
regards,
U.SivaKumar
Innovations are made when conventions are broken
Steve Steel
Honored Contributor

Re: None writable wtmp/btamp stops logging?

Hi


From man btmp

Also note that wtmp and btmp are not created by the programs that maintain them.
Thus, if these files are removed, record-keeping is turned off.


I would go for keeping a rehulalrly trimmed file but according to the man page .
If you remove them there will be no more logging.


Steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)