resolv.conf hijacking?

[Eric Sandeen]

Tom Horsley wrote:
> ARRGH! What the devil is hijacking my /etc/resolv.conf file?
> 
> I have NetworkManager completely uninstalled on this system
> (only NetworkManager-glib still exists due to dependencies).
> 
> I have the network service enabled. I have a static IP configured.
> 
> But something, somewhere, insists on overwriting my resolv.conf
> file.
> 
> If I knew who was doing it, I could file a bug report or figure
> out how to make it stop, but I have no clues.
> 
> Anyone know?

you could sysctl -w vm.block_dump=1 and watch for who dirties it, I'd
suggest an otherwise idle system so your logs don't explode with messages...

Or, some fancy inotify thing.

-Eric