resolv.conf hijacking?

[Bryn M. Reeves]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Eric Sandeen wrote:
> Tom Horsley wrote:
>> ARRGH! What the devil is hijacking my /etc/resolv.conf file?
>>
>> I have NetworkManager completely uninstalled on this system
>> (only NetworkManager-glib still exists due to dependencies).
>>
>> I have the network service enabled. I have a static IP configured.
>>
>> But something, somewhere, insists on overwriting my resolv.conf
>> file.
>>
>> If I knew who was doing it, I could file a bug report or figure
>> out how to make it stop, but I have no clues.
>>
>> Anyone know?
> 
> you could sysctl -w vm.block_dump=1 and watch for who dirties it, I'd
> suggest an otherwise idle system so your logs don't explode with messages...
> 
> Or, some fancy inotify thing.

Or a systemtap script that watches for things opening that path and logs
it. Probaby a good deal less log-spamming and there should be something
close in the War Stories section of the wiki:

http://sourceware.org/systemtap/wiki/WarStories

Regards,
Bryn.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFIxOz16YSQoMYUY94RAgMCAKDYPkmJcX+7ynzbfgdVN+wCsnBLegCfW+Og
d0D+8SuT4z+t3QyAkpB/fiM=
=VZPn
-----END PGP SIGNATURE-----