Lastlog Question..

[Christopher Wagner]

That's why I asked, I thought there would be a semi-complicated process for
doing it.  Thanks Eric!!!

Any idea why it would be so big?  This system doesn't have many users on it,
maybe 5 or 6 real users and the system users.

- Christopher Wagner
chrisw at pacaids.com

Packaging Aids Corporation - Information Systems
P.O. Box 9144
San Rafael, CA 94912-9144
http://www.pacaids.com/
(415) 454-4868 x116


-----Original Message-----
From: Eric Eisenhart [mailto:eric at eisenhart.com]
Sent: Wednesday, August 14, 2002 6:29 PM
To: talk at nblug.org
Subject: Re: Lastlog Question..


On Wed, Aug 14, 2002 at 05:43:40PM -0700, Christopher Wagner wrote:
> On one of my computers, my /var/log/lastlog is approaching 20 meg..  Is
this
> normal?  Should this be part of normal log rotation?  What's the safest
way
> to get this back to a reasonable size?  Thanks folks!

It should be rotated by logrotate about once a month.

It depends on how many users you have.

Actually, I think it might depend more on what the highest uid# in your
passwd database is.

It should, I think, be reasonably safe to rotate it yearly via logrotate or
to do it manually; something like:

cd /var/log
touch lastlog.new
chown --reference=lastlog lastlog.new
chmod --reference=lastlog lastlog.new
ln lastlog lastlog.1
mv lastlog.new lastlog

(yes, that seems complicated and weird; it's all about atomic operations so
there's never a point at which there isn't either the old lastlog file or
the new lastlog file in place; it's related to last night's discussion about
database transactions: with filesystem transactions that would be
"transaction start ; mv lastlog lastlog.1 ; touch lastlog ; chown
--reference=lastlog.1 lastlog; chmod reference=lastlog.1 lastlog ;
transaction commit", which is, actually, no less complicated, really)
--
Eric Eisenhart                                  eric-dot-sig at eisenhart.com
Perl, SQL, Linux and Web            ^           IRC: Freiheit at openprojects
Coder, Sysadmin and geek           /e\                AIM: falsch freiheit
http://eric.eisenhart.com/         ---                       ICQ: 48217244


SPAM: ---- Start SpamAssassin results
SPAM: -4.4 hits, 5 required;
SPAM: * -4.4 -- 'In-Reply-To' line found
SPAM:
SPAM: ---- End of SpamAssassin results