Just found the script, someone had put it in the cron.weekly. Thanks for the replies. Regards Andrew Bridgeman |-----------------------------+-------------------------------------------| | Joey Prestia | | | <joey@xxxxxxxxxxxx> | | | Sent by: | To| | redhat-list-bounces@redhat| General Red Hat Linux | | .com | discussion list | | | <redhat-list@xxxxxxxxxx> | | 12/05/2008 15:34 | cc| | | | | Please respond to | Subject| | General Red Hat Linux | Re: Find Hidden Script | | discussion list | | | <redhat-list@xxxxxxxxxx| | | > | | | | | | | | | | | |-----------------------------+-------------------------------------------| Andrew.Bridgeman@xxxxxxxxxxxxxx wrote: > > > I am currently trying to track down a script that is run on one of our > redhat machines which was put in place by someone no longer in the company. > The script basically runs a remove on a temp area but we now want to stop > it doing this but unfortunately I cannot see it in any crons on the > machine. I have looked at all the logical account for the crons to be > running under but have had no luck. Does anyone know a good way of finding > out who and where on the machine it is running from. > > Regards > > Andrew Bridgeman > Did you look in the system cron directories /etc/cron.daily /etc/cron.hourly and those directories referred to in the system crontab file some sysadmins will add scripts to cron by just putting them in the system cron file in one of the directories that are pointed to by a run-parts command and forget about them. -- Joey Prestia -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list ********************************************************************** This transmission is confidential and must not be used or disclosed by anyone other than the intended recipient. Neither Tata Steel UK Limited nor any of its subsidiaries can accept any responsibility for any use or misuse of the transmission by anyone. For address and company registration details of certain entities within the Corus group of companies, please visit http://www.corusgroup.com/entities ********************************************************************** -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list