Disabling wtmp in openbmc
Andrew Geissler
geissonator at gmail.com
Wed Nov 1 13:12:24 AEDT 2017
I noticed our automation systems were having some very large
/var/log/wtmp files. This is a file that keeps track of all logins to
the system. It's really only useful if you have the 'last' tool
installed (although we could copy it off and post-process later).
Looks like normally we'd install logrotate to ensure it's rotated
properly but my vote is we just disable it. We'll still have
/var/log/lastlog for some tracking history if needed.
Something that takes up persistent storage, and can grown unbounded is
a bit worrisome in an embedded system.
I really don't have much experience in this area so any thoughts or
ideas are appreciated. I've been doing some research and there
doesn't actually seem to be a great way to disable wtmp. Some
indications are that with Linux, just deleting it is a bad idea. Some
people point to removing it and then making a link to /dev/null. I've
got a few trial commits out there but no silver bullet yet.
https://gerrit.openbmc-project.xyz/#/c/7683/ (I think this is how we
would remove it?)
https://gerrit.openbmc-project.xyz/#/c/7725/ (I assumed dropbear was
doing all the logging but even with this the file still grew on ssh
logins)
Thanks,
Andrew
More information about the openbmc
mailing list