[Wylug-help] Removing a crontab

[Anne Wilson]

On Monday 12 February 2007 09:05, Nigel Metheringham wrote:
> On 11 Feb 2007, at 22:25, John Hodrien wrote:
> > On Sun, 11 Feb 2007, Anne Wilson wrote:
> >> Every FC box I have has a 'nobody' cron file, empty.  I don't know
> >> why I
> >> suddenly started to get complaints about it.  Chkrootkit never
> >> used to
> >> complain.  Maybe it's a buggy update.
> >
> > As in /var/spool/cron/nobody?  Sorry, I've only been half following
> > this.
> > That's not a standard FC thing, so I imagine it's something you've
> > done to all
> > your boxes unwittingly.
>
> I don't have a /var/spool/cron/nobody on any of my Fedora boxes either.
>
Strange.  Not only am I reasonably sure that I haven't done anything to cause 
this, but checking on this box shows the time-stamp as 10th January, 12:00 - 
exactly the same as all the other entries in that directory.  (This isn't the 
box that was complaining.  The other box is FC4, and arguably the most 
important one on the LAN, so I run chkrootkit on that one only.)

The good news, though, is that deleting that entry has stopped the annoying 
message.

Still, I hate mysteries.  These messages have only been occurring for a couple 
of weeks.  Something must have changed, and it's my guess that it's a 
chkrootkit update.  It seems that chkrootkit is out of fashion, with rkhunter 
being used more lately, so it's possible that no-one on the fedora-user list 
is seeing this.

Anne
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://list.wylug.org.uk/pipermail/wylug-help/attachments/20070212/4c3fc45a/attachment.bin