This is a rather embarrassing sysadmin problem I have. Something keeps overwriting the permissions for /dev/null causing strange issues. I have to keep resetting permissions on /dev/null. I have no idea what is causing this. Anyone have any ideas on how to track down the issue?
Conversation
Replying to
Not Docker on this server. My suspicion is that one of the scripts I wrote that runs every hour is overwriting /dev/null instead of piping into it.
It looks like auditctl is a possible candidate to help track down the process doing this.
Replying to
lsof lists open files, shows you the command, PID, and user:
# lsof /dev/null