Jeff,
crontabs come from:
/var/spool/cron/$USER
and
/etc/crontab
/etc/cron.daily
/etc/cron.hourly
/etc/cron.weekly
/etc/cron.monthly

Now in the *original* department:

I'd probably try moving the /sbin/shutdown and /sbin/reboot
binaries to somewhere *safe* and write a small shell script
that will send you email of the $USER trying to issue the command!

If that turns up something, then move the binaries back, If not, holler
back.

Off the cuff:

#!/bin/sh
# Sanity check for reboots
# this is /sbin/shutdown now...
#
case $USER in
        root) echo "Moved it dummy..."
        ;;
        *) echo $USER | mail -s "Shutdown thing" root 
        ;;
esac
exit


Rick

On Tue, 17 Mar 1998, Jeff Halper wrote:

> One of my servers reboots at 4:52AM - not every day, but almost every day.
> 
> I cannot find any cron command that tells it to reboot - any ideas how I
> can find the source of this rebooting? I use 128 megs RAM, 4 gig Ultra
> SCSI Drive, plenty of space available. Redhat 4.2
> 
> This has been bugging me for months! Probably something fairly simple,
> but I am "blind" and cannot see where this is coming from. Any ideas?
> 
> Jeff Halper
> Internet Hotline
> 408/881-1000
> http://www.ihot.com
> mailto:[EMAIL PROTECTED]
> 
> 

--
Rick L. Mantooth        [EMAIL PROTECTED]
http://www.why.net/users/rickdman/index.html
We have enough youth, how about a fountain of "Smart."



-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
         To unsubscribe: mail [EMAIL PROTECTED] with 
                       "unsubscribe" as the Subject.

Reply via email to