httpd-modsec2_debug.log: Operation not permitted

[Carl Johnson]

Swe Gill <swegill at gmail.com> writes:

> Hi Peg
>
> Thanks for your help.... by applying "ls -lao"..... I get following result
>
> -rw-------   1 root  wheel    sappnd  8307655937 Jan 13 10:45 debug.log
> -rw-------   1 root  wheel    sappnd       15415 Oct  2  2009 dmesg.today
> -rw-r--r--   1 root  wheel    -                0 Oct  2  2009
> httpd-access.log
> -rw-r--r--   1 root  wheel    -              271 Oct  2  2009
> httpd-error.log
> -rw-rw----   1 root  wheel    -      53969161077 Jan 13 10:45
> httpd-modsec2_audit.log
> -rw-rw----   1 root  wheel    -       3397158201 Jan 13 10:44
> httpd-modsec2_debug.log
> -rw-r--r--   1 root  wheel    sappnd       28056 Oct  2  2009 lastlog
> -rw-r--r--   1 root  wheel    sappnd          66 Oct  1  2009 lpd-errs
>
> I just don't understand why I am unable to remove the files...

I don't know if you have resolved this yet, but one problem is the
sappnd flag on some of the files.  That flag means that those file are
append-only and can't be deleted or truncated.  You need to remove the
sappnd flag with the command 'chflags nosappnd' for those files.  I
don't think that is default, so somebody had to have manually set the
flag on those files.  Whoever did that should have noted that, or didn't
understand what the operation meant.

-- 
Carl Johnson		carlj at peak.org