[rhn-users] Re: Why do all of the files in /etc get changed every oncein a while?

Cameron Simpson cs at zip.com.au
Mon Mar 9 23:40:32 UTC 2009


On 09Mar2009 16:27, Christopher L. Barnard <cbarnard at rush.edu> wrote:
| No system updates have been done, but full backups correspond to the
| tripwire reports.  But why would full backups change the timestamp of
| all of the files in /etc but not alter any others?

Is it modification time (mtime) or the access time (atime) or the
change-to-inode time (ctime)? If it is the mtime, something is odd. The
others might easily be changed by backup or integrity software (eg
tripwire itself). Do your backups only back up specific parts of the
filesystem? Likewise tripwire?
-- 
Cameron Simpson <cs at zip.com.au> DoD#743
http://www.cskk.ezoshosting.com/cs/

It is not true that life is one damn thing after another -- it's one damn
thing over and over.    - Edna St. Vincent Millay




More information about the rhn-users mailing list