Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 15 Jan 2011 09:55:41 -0800
From:      Carl Johnson <carlj@peak.org>
To:        freebsd-questions@freebsd.org
Cc:        Swe Gill <swegill@gmail.com>
Subject:   Re: httpd-modsec2_debug.log: Operation not permitted
Message-ID:  <87ipxq2grm.fsf@oak.localnet>
In-Reply-To: <AANLkTik%2Bsb96kA=R8Bv5uSSc7ZeC-JSDYJb9%2BQhQ=oE5@mail.gmail.com>	(Swe Gill's message of "Thu, 13 Jan 2011 11:03:21 %2B0100")
References:  <AANLkTimk-EXkEKQ80QVBg5utpbt3SU1LK_eAvSfk6Skt@mail.gmail.com> <000301cbb307$49788810$dc699830$@com> <AANLkTik%2Bsb96kA=R8Bv5uSSc7ZeC-JSDYJb9%2BQhQ=oE5@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Swe Gill <swegill@gmail.com> writes:

> Hi Peg
>
> Thanks for your help.... by applying "ls -lao"..... I get following result
>
> -rw-------   1 root  wheel    sappnd  8307655937 Jan 13 10:45 debug.log
> -rw-------   1 root  wheel    sappnd       15415 Oct  2  2009 dmesg.today
> -rw-r--r--   1 root  wheel    -                0 Oct  2  2009
> httpd-access.log
> -rw-r--r--   1 root  wheel    -              271 Oct  2  2009
> httpd-error.log
> -rw-rw----   1 root  wheel    -      53969161077 Jan 13 10:45
> httpd-modsec2_audit.log
> -rw-rw----   1 root  wheel    -       3397158201 Jan 13 10:44
> httpd-modsec2_debug.log
> -rw-r--r--   1 root  wheel    sappnd       28056 Oct  2  2009 lastlog
> -rw-r--r--   1 root  wheel    sappnd          66 Oct  1  2009 lpd-errs
>
> I just don't understand why I am unable to remove the files...

I don't know if you have resolved this yet, but one problem is the
sappnd flag on some of the files.  That flag means that those file are
append-only and can't be deleted or truncated.  You need to remove the
sappnd flag with the command 'chflags nosappnd' for those files.  I
don't think that is default, so somebody had to have manually set the
flag on those files.  Whoever did that should have noted that, or didn't
understand what the operation meant.

-- 
Carl Johnson		carlj@peak.org




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87ipxq2grm.fsf>