Mart van de Wege [2021-05-03 20:11:25] wrote:
> Stefan Monnier <monn...@iro.umontreal.ca> writes:
>>> root@galahad:~# grep btrbk /etc/ -rl
>>
>> Have you `grep`d in `/var/` as well?
>> [ E.g. `/var/spool/crontabs` ]
>>
> Yep, nothing there, aside from the usual suspects (apt & dpkg files).
>
>>> And yet I find this in /var/log/btrbk.log:
>>>
>>> 2017-03-12T20:16:28+0100 startup v0.24.0 - - - - # btrbk command line
>>> client, version 0.24.0
>>
>> Any other mention of activity around that time in some other log file?
>>
>>
> Not that I can see. I am going to see what patching btrbk to log PPID
> shows up tonight.
My usual "trick" is to log a full `ps --forest -ef`.
[ Instead of patching, you can rename it and replace it with a script
that runs the "real" btrbk. ]
Stefan
