Bug#953860: how to reproduce

[Russell Coker]

On Wednesday, 25 March 2020 3:23:55 PM AEDT Michael Biebl wrote:
> > root at sevm:~# grep dele /proc/293/maps
> > 7fca8e8ef000-7fca8f0ef000 rw-s 00000000 00:15 2013277                   
> > /var/ log/journal/68f1b89bf8c73b0ed9ed905f535fa641/
> > user-1002 at 6cf63a35b84c49e8b4fc99b777fb7629-0000000000000000-00000000000000
> > 00.journal (deleted)
> 
> Can you find out, how the file was deleted?

systemd-journald just decided to do it.

I'll put in an audit entry to get an audit log of it.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/