On Fri 09 Aug 2019 at 14:53:32 (-0500), Greg Marks wrote: > On a computer running Debian 10, in a number of directories a > subdirectory "history" has mysteriously appeared containing a > file history.db. There are 11 of these history.db files in various > places in my home directory; cmp reveals that they are all identical. > Each is an "SQLite 3.x database, last written using SQLite version > 3027002." Each is a 12288-byte file containing, in addition to a > bunch of special characters, the words: "tableversionversionCREATE > TABLE version ( version VARCHAR NOT NULL, datfile VARCHAR UNIQUE NOT > NULL)-Andexsqlite_autoindex_version_1version." In some (but not all) > cases the timestamp on history/history.db matches the timestamp of some > file I was editing with vim 8.1.1401 in the same directory containing the > history subdirectory--for whatever that's worth--but I can't reproduce > the phenomenon by editing similar files with vim. All history/history.db > files appeared since upgrading from Debian 9. I couldn't find anything > relevant in the log files around the timestamps of the mystery files. > > Does anyone know what might be causing this? As far as I can tell it's > harmless, but it is a bit disquieting when files start appearing that > I didn't intentionally create.
You might try running a script that takes a snapshot of ps output every minute (just processes owned by you) and then reconciling the timestamps on the .db files with what you were running at the time. I get the impression that you/it might be editing *within* some other application. Cheers, David.
