On 2016-10-04 22:41, Chris wrote:
All,
OpenSuSE 12.2: history | less showed some commands tonight, which I haven't entered, at least not at this time. Maybe some time ago. There's no cron job that could have executed them and I have found no script-recording that I've accidentally called. Some files were displayed with less. A script would rather not do that. When I logged out and in again, those commands were missing in history | less. last shows only my login and my IP. Couldn't find any clue in /var/log/messages. Furthermore, there was a gap. Those strange recent commands and commands from several months ago. Last months were missing. Is there any feasible explanation for this behavior? Was this box cracked?
I have found that history is not very reliable. Sometimes it gets entirely cleared out. It has to combine entries from all sessions, that is not simple. Commands in one session do not appear on others unless I relogin on both. I end by having a backup of the history file. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)