what script is whacking root's files

[Derek Ragona]

At 11:33 AM 12/4/2008, Giorgos Keramidas wrote:
>On Thu, 04 Dec 2008 06:30:13 -0600, Derek Ragona 
><derek at computinginnovations.com> wrote:
> > /root is on /dev/da0s1a
> >
> > This particular server is running in a VM on a vmware esx 3.5 server.
> > The server runs fine, but every so often the dot files disappear for
> > root.  I have not found the behavior to follow a reboot, but some period
> > of time.  Hence my suspicions it was a periodic script.
>
>Check your crontab jobs then.
>
>   * Do you have any local changes to the system crontab in
>     `/etc/crontab'?  If yes, what are those changes, and what do the
>     scripts or other commands they run look like?
>
>   * Do you have a user-specific crontab file for `root' in
>     `/var/cron/tabs/root'?  If yes what does it contain?
>
>_______________________________________________

Thank you to everyone who made great suggestions.  I found the errant 
script, and it was running out of a cron entry to clean up old mailscanner 
files.  It seems if the directories in the script didn't all exist, and a 
cd failed, it left the script running in /root.  I have since corrected the 
script to test for the directories existence first.

But this was a case of "can't see the forest for the trees" and I do 
appreciate all the help and suggestions.

         -Derek

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.