[H-GEN] Cron logging has stopped

[Robert Brockway]

On Mon, 8 Mar 2004, Rick Phillips wrote:

> Can someone point me to where I should look for something wrong.  Have I

Hi Rick.  Cron will automatically email the owner of the cron job if it is
not told to log anywhere specific.

I'd check the mail configuration, send emails as cron would send them
(from the user to the user) and check that cron is definitely 100% working
as you expect.  check the movement of the emails in the logs,

I find it useful in cases like this to setup a cron job (doing something
like cat /etc/hosts which produces output) to go off every minute (or at
least regularly) for a little while while I'm testing.  Don't forget it or
you may find an over abundance of email in your inbox tommorrow :)

> been rootkitted? I see no evidence in the usual places following a bad
> experience I had 2 years ago.  I am paranoid about security updates and
> apply them same day.  In fact one of my cron jobs checks the mirrors
> daily.

The problem is far more likely to be a simple config error or a file
corruption but it is always worth keeping the possiblity of an intrusion
in the back of your mind.

If you are really worried, boot your box from CD and run chkrootkit from a
known good source (ie, not the harddrive).

Does Knoppix contain chkrootkit? I can't recall.

Rob

-- 
Robert Brockway B.Sc. email: robert at timetraveller.org, zzbrock at uqconnect.net
Linux counter project ID #16440 (http://counter.li.org)
"The earth is but one country and mankind its citizens" -Baha'u'llah