Bug#953860: how to reproduce

[Michael Biebl]

Am 25.03.20 um 05:18 schrieb Russell Coker:
> I created a user on the 21st of March, logged in a couple of times, then 
> didn't use that account again.  Now on the 25th of March I have a mapped 
> deleted file.  The command "journalctl --rotate" fixes the problem.
> 
> root at sevm:~# last|grep test
> test     pts/1        103.75.204.226   Sat Mar 21 13:36 - 13:37  (00:00)
> test     pts/1        103.75.204.226   Sat Mar 21 13:36 - 13:36  (00:00)
> root at sevm:~# id test
> uid=1002(test) gid=1002(test) groups=1002(test)
> root at sevm:~# ps aux|grep journald
> root         293  0.0  0.0  67932 16016 ?        Ss   Mar24   0:29 /lib/
> systemd/systemd-journald
> root at sevm:~# grep dele /proc/293/maps 
> 7fca8e8ef000-7fca8f0ef000 rw-s 00000000 00:15 2013277                    /var/
> log/journal/68f1b89bf8c73b0ed9ed905f535fa641/
> user-1002 at 6cf63a35b84c49e8b4fc99b777fb7629-0000000000000000-0000000000000000.journal 
> (deleted)
> 

Can you find out, how the file was deleted?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20200325/814e0300/attachment.sig>