Re: How to delete log files

> This last almost sounds like you've got some funny
flags set on
> the file and/or directory (clutching at straws here!). 
What
> does "ls -loa /var/log" show?  "mount
-vv" and "df" output may be
> helpful too...
>
> One more option might be to boot to single user mode
and
> "fsck -f /dev/..." for the partition where
your /var lives to
> make sure there's nothing wrong with the filesystem.
>
> Cheers,
> Simon.
>   
I think you've hit on it....the sappnd flag is set for both
the directory
and the files in question.  So now how do I turn off this
flag?

raq2:  ls -loa /var/log
total 182448
drwxr-x---   3 root     wheel       sappnd     1536 Mar  2
22:47 .
drwxr-xr-x  24 root     wheel       -           512 Oct  1 
2005 ..
-rw-r-----   1 uucp     dialer      sappnd       60 Aug  7 
2005 aculog
-rw-r-----   1 uucp     dialer      sappnd       98 Aug  7 
2005 aculog.0.gz
-rw-r-----   1 uucp     dialer      sappnd      103 Aug  6 
2005 aculog.1.gz
-rw-r-----   1 uucp     dialer      sappnd      101 Aug  5 
2005 aculog.2.gz
-rw-r-----   1 uucp     dialer      sappnd       97 Aug  4 
2005 aculog.3.gz
-rw-r-----   1 uucp     dialer      sappnd      101 Aug  3 
2005 aculog.4.gz
-rw-r-----   1 uucp     dialer      sappnd       99 Aug  2 
2005 aculog.5.gz
-rw-r-----   1 uucp     dialer      sappnd       99 Aug  1 
2005 aculog.6.gz
-rw-------   1 root     wheel       sappnd 22882637 Mar  3
04:41 authlog
-rw-------   1 root     wheel       sappnd    11939 Aug  7 
2005 
authlog.0.gz
-rw-------   1 root     wheel       sappnd    12556 Jul 31 
2005 
authlog.1.gz
-rw-------   1 root     wheel       sappnd     7391 Jul 26 
2005 
authlog.2.gz
-rw-------   1 root     wheel       sappnd     6779 Jul 26 
2005 
authlog.3.gz
-rw-------   1 root     wheel       sappnd     7856 Jul 26 
2005 
authlog.4.gz
-rw-------   1 root     wheel       sappnd  9126049 Mar  3
05:10 cron
-rw-------   1 root     wheel       sappnd     8398 Aug  5 
2005 cron.0.gz
-rw-------   1 root     wheel       sappnd     8206 Aug  2 
2005 cron.1.gz
-rw-------   1 root     wheel       sappnd     8422 Jul 29 
2005 cron.2.gz
-rw-r--r--   1 root     wheel       sappnd      711 Aug  7 
2005 daily.out
-rw-rw-r--   1 root     utmp        sappnd    28168 Aug  7 
2005 lastlog
-rw-rw-r--   1 root     utmp        sappnd    65536 Aug  7 
2005 lastlogx
-rw-r-----   1 root     wheel       sappnd        0 Jul  3 
2005 lpd-errs
-rw-------   1 root     wheel       sappnd 36219618 Mar  3
05:16 maillog
-rw-------   1 root     wheel       sappnd     2869 Aug  7 
2005 
maillog.0.gz
-rw-------   1 root     wheel       sappnd     3954 Aug  6 
2005 
maillog.1.gz
-rw-------   1 root     wheel       sappnd     4699 Aug  5 
2005 
maillog.2.gz
-rw-------   1 root     wheel       sappnd     4394 Aug  4 
2005 
maillog.3.gz
-rw-------   1 root     wheel       sappnd     4041 Aug  3 
2005 
maillog.4.gz
-rw-------   1 root     wheel       sappnd     1577 Aug  2 
2005 
maillog.5.gz
-rw-------   1 root     wheel       sappnd     3231 Aug  1 
2005 
maillog.6.gz
-rw-r--r--   1 root     wheel       sappnd 23940376 Mar  3
04:16 messages
-rw-r--r--   1 root     wheel       sappnd    13112 Jul 26 
2005 
messages.0.gz
-rw-r--r--   1 root     wheel       sappnd    13199 Jul 26 
2005 
messages.1.gz
-rw-r--r--   1 root     wheel       sappnd    14434 Jul 25 
2005 
messages.2.gz
-rw-r--r--   1 root     wheel       sappnd    19128 Jul 25 
2005 
messages.3.gz
-rw-r--r--   1 root     wheel       sappnd    14580 Jul 25 
2005 
messages.4.gz
-rw-r--r--   1 root     wheel       sappnd    15008 Jul 24 
2005 
messages.5.gz
-rw-r--r--   1 root     wheel       sappnd    13752 Jul 24 
2005 
messages.6.gz
-rw-r--r--   1 root     wheel       sappnd    13470 Jul 23 
2005 
messages.7.gz
-rw-r--r--   1 root     wheel       sappnd    13716 Jul 23 
2005 
messages.8.gz
-rw-r--r--   1 root     wheel       sappnd    14139 Jul 22 
2005 
messages.9.gz
drwxr-xr-x   2 root     wheel       sappnd      512 Jul  3 
2005 rdist
-rw-------   1 root     wheel       sappnd        0 Jul  3 
2005 secure
-rw-r--r--   1 root     wheel       sappnd        0 Jul  3 
2005 sendmail.st
-rw-r--r--   1 root     wheel       sappnd      100 Aug  6 
2005 weekly.out
-rw-r--r--   1 root     utmp        sappnd    36684 Mar  3
04:36 wtmp
-rw-r--r--   1 root     utmp        sappnd      194 Aug  5 
2005 wtmp.0.gz
-rw-r--r--   1 root     utmp        sappnd      244 Jul 30 
2005 wtmp.1.gz
-rw-r--r--   1 root     utmp        sappnd      618 Jul 27 
2005 wtmp.2.gz
-rw-r--r--   1 root     utmp        sappnd      502 Jul 20 
2005 wtmp.3.gz
-rw-r--r--   1 root     utmp        sappnd       65 Jul 13 
2005 wtmp.4.gz
-rw-r--r--   1 root     utmp        sappnd      516 Jul 11 
2005 wtmp.5.gz
-rw-r--r--   1 root     utmp        sappnd       43 Jul  4 
2005 wtmp.6.gz
-rw-r--r--   1 root     utmp        sappnd   521728 Mar  3
04:36 wtmpx
-rw-r--r--   1 root     utmp        sappnd      536 Aug  5 
2005 wtmpx.0.gz
-rw-r--r--   1 root     utmp        sappnd      733 Jul 30 
2005 wtmpx.1.gz
-rw-r--r--   1 root     utmp        sappnd     1708 Jul 27 
2005 wtmpx.2.gz
-rw-r--r--   1 root     utmp        sappnd     1238 Jul 20 
2005 wtmpx.3.gz
-rw-r--r--   1 root     utmp        sappnd      106 Jul 13 
2005 wtmpx.4.gz
-rw-r--r--   1 root     utmp        sappnd     1511 Jul 11 
2005 wtmpx.5.gz
-rw-r--r--   1 root     utmp        sappnd       57 Jul  4 
2005 wtmpx.6.gz
-rw-------   1 root     wheel       sappnd   133975 Dec  4
00:01 xferlog

raq2:  cd ..
raq2:  ls -loa
total 96
drwxr-xr-x  24 root    wheel     -       512 Oct  1  2005 .
drwxr-xr-x  19 root    wheel     -       512 Aug 14  2005
..
drwxr-xr-x   2 root    wheel     -       512 Jul  3  2005
account
drwxr-xr-x   4 root    wheel     -       512 Jul  4  2005
at
drwxr-xr-x   6 root    wheel     -       512 Jul  6  2005
backups
drwxr-xr-x   6 root    wheel     -       512 Jul  3  2005
chroot
drwxrwx---   2 root    wheel     -       512 Jul  4  2005
crash
drwxr-xr-x   3 root    wheel     -       512 Jul  3  2005
cron
drwxr-xr-x   7 root    wheel     -       512 Jul  6  2005
db
drwxrwxr-x   6 games   games     -       512 Jul  4  2005
games
drwxr-xr-x   2 root    wheel     -       512 Jul  3  2005
heimdal
drwxr-x---   3 root    wheel     sappnd 1536 Mar  2 22:47
log
drwxrwxrwt   2 root    wheel     -       512 Mar  3 05:17
mail
drwxr-xr-x   2 daemon  wheel     -       512 Jul  4  2005
msgs
drwxr-xr-x   2 root    wheel     -       512 Jul  3  2005
preserve
drwxr-x---   2 root    operator  -       512 Jul  3  2005
quotas
drwxr-xr-x   2 root    wheel     -       512 Mar  3 04:16
run
drwxr-xr-x   2 root    wheel     -       512 Jul  3  2005
rwho
drwxr-xr-x  11 root    wheel     -       512 Jul  3  2005
spool
drwxrwxrwt   3 root    wheel     -       512 Mar 23  2006
tmp
drwxr-xr-x   2 root    bin       -       512 Jul  5  2005
usermin
drwxr-xr-x   4 root    wheel     -       512 Oct  1  2005
webmail
drwx------   2 root    bin       -       512 Jul  5  2005
webmin
drwxr-xr-x   3 root    wheel     -       512 Jul  4  2005
yp

raq2:  mount -vv
mount_ffs: /dev/wd0a on /: specified device does not match
mounted device
/dev/wd0a on / type ffs (local, root file system, fsid:
0x600/0x78b, 
reads: sync
 63243 async 8, writes: sync 247 async 185)
/dev/wd0f on /var type ffs (local, fsid: 0x605/0x78b, reads:
sync 5036 
async 0,
writes: sync 321 async 151)
/dev/wd0g on /tmp type ffs (local, fsid: 0x606/0x78b, reads:
sync 756 
async 0, w
rites: sync 58 async 42)
raq2: 

David Albert wrote:

> 
> > This last almost sounds like you've got some funny
flags set on
> > the file and/or directory (clutching at straws
here!).  What
> > does "ls -loa /var/log" show? 
"mount -vv" and "df" output may be
> > helpful too...
> >
> > One more option might be to boot to single user
mode and
> > "fsck -f /dev/..." for the partition
where your /var lives to
> > make sure there's nothing wrong with the
filesystem.
> >
> > Cheers,
> > Simon.
> >   
> I think you've hit on it....the sappnd flag is set for
both the directory
> and the files in question.  So now how do I turn off
this flag?

Use "chflags -R nosappnd /var/log".  See init(8)
though - you need to
be at securelevel 0 or -1 to do this.  If securelevel is 1
or greater,
it's easiest to do this in single user mode.

Cheers,
Simon.