root@sevm:/proc/291# ls -l fd|grep user lrwx------. 1 root root 64 Mar 13 09:18 21 -> /var/log/journal/ 68f1b89bf8c73b0ed9ed905f535fa641/user-1000.journal lrwx------. 1 root root 64 Mar 13 09:18 26 -> /var/log/journal/ 68f1b89bf8c73b0ed9ed905f535fa641/user-1001.journal lrwx------. 1 root root 64 Mar 13 09:18 31 -> /var/log/journal/ 68f1b89bf8c73b0ed9ed905f535fa641/ user-1000@802af85f15f0436cbbf371c9ef25cc3d-0000000000000000-0000000000000000.journal (deleted) root@sevm:/proc/291# grep user maps 7fb50cf59000-7fb50d759000 rw-s 00000000 00:15 1956344 /var/ log/journal/68f1b89bf8c73b0ed9ed905f535fa641/ user-1000@802af85f15f0436cbbf371c9ef25cc3d-0000000000000000-0000000000000000.journal (deleted) 7fb50d759000-7fb50df59000 rw-s 00000000 00:15 1971236 /var/ log/journal/68f1b89bf8c73b0ed9ed905f535fa641/user-1001.journal 7fb517dae000-7fb5185ae000 rw-s 00000000 00:15 1971567 /var/ log/journal/68f1b89bf8c73b0ed9ed905f535fa641/user-1000.journal 7fb519d27000-7fb519d28000 rw-s 00000000 00:15 1971567 /var/ log/journal/68f1b89bf8c73b0ed9ed905f535fa641/user-1000.journal 7fb519d28000-7fb519d29000 rw-s 00000000 00:15 1971236 /var/ log/journal/68f1b89bf8c73b0ed9ed905f535fa641/user-1001.journal
I get the impression that the user-$UID.journal file is the currently written file and iuser-$UID@$GUUID.journal is an old file. Therefore this really looks like a leak of a file handle. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/