Re: secure file not updating

[Barry Brimer <lists@xxxxxxxxxx>]

> On my Centos 5 server, the secure file has not updated
> since Dec 10.  This despite the fact that I run an
> sshd server that I access many times per day.  Most
> peculiar is the fact that a swatch monitor that I run
> on the secure file catches plenty of lines.  It is
> as if when swatch catches a line in the file, the line
> is removed from the file and the modification date
> is set back.  Hard to believe.  Any ideas?

What is the output of "lsattr /var/log/secure"?  Do you have SELinux 
enabled, and are there any corresponding lines in 
/var/log/audit/audit.log?
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos