1 comando (su, sudo) inunda as entradas em / var / log / messages [closed]

1

É uma loucura quando você acabou de digitar um exemplo de comando sudo ou su ou mesmo ps . Ele inundará seu /var/log/messages . Por favor, veja entradas duplicadas, exceto para o pid. Em 1 hora específica. Eu apenas digito sudo su - e abaixo está a inundação. Acabei de digitar o comando sudo e se você pode ver o /var/log/messages está inundando com PID diferente. deve ter pelo menos 1 entrada não múltipla. Minha outra caixa é apenas uma entrada. Obrigado

[user1@SERVER1:~]$ cat /var/log/messages
Jan 13 17:09:05 SERVER1 bash[727]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[731]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[735]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[739]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[745]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[753]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[757]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[761]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[765]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[769]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[773]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[783]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[787]: user1 as root:

Solicitações são

[root@NEWSERVER:~]# echo "$PROMPT_COMMAND"
printf "3]0;%s@%s:%s
[newuser@NEWSERVER:~]$ sudo su -
[root@NEWSERVER:~]#

[root@NEWSERVER:~]# tail -f /var/log/messages
Jan 16 15:29:31 NEWSERVER bash[66067]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66071]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66075]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66079]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66085]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66089]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66093]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66097]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66101]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66105]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66109]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66113]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66123]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66127]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66131]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66135]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66141]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66145]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66149]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66153]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66163]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66167]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66171]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66175]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66181]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66185]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66189]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66193]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66197]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66201]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66205]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66209]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66213]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66223]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66227]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66231]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66235]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66239]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66243]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66247]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66251]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66255]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66259]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66263]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66269]: newuser as root:
Jan 16 15:29:31 NEWSERVER bash[66273]: newuser as root:
7" "${USER}" "${HOSTNAME%%.*}" "${PWD/#$HOME/~}" [root@NEWSERVER:~]# echo "$PS1" \[\][\u@\h:\w]# \[\] [root@NEWSERVER:~]#

JUST NOW:

trap -- 'log2syslog' DEBUG

A saída de trap é

[user1@SERVER1:~]$ cat /var/log/messages
Jan 13 17:09:05 SERVER1 bash[727]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[731]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[735]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[739]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[745]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[753]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[757]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[761]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[765]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[769]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[773]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[783]: user1 as root:
Jan 13 17:09:05 SERVER1 bash[787]: user1 as root:
    
por invinzin21 13.01.2017 / 19:09

0 respostas

Tags