On Tue, 2013-01-29 at 10:20 -0300, Cristian Rodríguez wrote:
El 29/01/13 03:31, Anders Johansson escribió:
So you are saying if a daemon crashes, all we can tell people is "sorry, run it again, your files have been deleted? FHS version 2.3 explains it for you. "The /tmp directory must be made available for programs that require temporary files. Programs must not assume that any files or directories in /tmp are preserved between invocations of the program."
+1 Assuming you can collect forensic information from /tmp is mis-guided; plain and simple. If a deamon actually 'crashes' then it needs to be debugged, that means gdb or some tool, at least using strace. As it is running one assumes a deaemon will be logging relevant information somewhere - logs are intentionally persistent. If you have processes you really need to audit then they need to be built to support auditing [that is what workflow solutions and workflow engines are for]. -- Adam Tauno Williams GPG D95ED383 Systems Administrator, Python Developer, LPI / NCLA -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org