Spam Assassin error logged when running cron task: /usr/lib/sa/sa2 -A

[Kent Brockman]

Hello guys. I started receiving this error a couple days ago (2014/01/08)

Subject: Cron <[email protected]> /usr/lib/sa/sa2 -A
Body:
rm: cannot remove `/var/log/sa/sar27': Operation not permitted

BTW, I checked this:

root [/var/log/sa/]# ls -l /var/log/sa/sar27
ls: /var/log/sa/sar27: Input/output error
s---rwS-wx 512 272433664 33591349 0 Jan 24  1971 /var/log/sa/sar27

There are a bunch of numbered files with sequential date but this one is strange. It should have date 12/27/2013, but it's not.
How can I delete it?

And what are those group/user id's? should I be worried? are filesystem errors? how can I be sure?

Thanks in advance!

Update: googling further I found that the "sa" from /usr/lib/sa/sa2 is not from SpamAssassin. Actually is sar, instead.
http://www.sarcheck.com/sarhowto.htm
is this right?

 

[fabin]

This has nothing to do with spam assassin or cPanel.

sar is System Activity Report and comes with package sysstat.

 

[Kent Brockman]

Nevertheless, that weird file is impossible to delete. May be a disk problem?

 

[cPanelMichael]

Hello

The error message you provided indicates possible disk corruption. You can try reviewing /var/log/dmesg or /var/log/messages for additional information, or consult with your provider to see if running FSCK (File System Check) at boot time would be beneficial.

Thank you.

 

[Kent Brockman]

Hello Michael, thanks for confirming my fears (disk problems).
The /var/log/dmesg file appears with zero size.
What should I look for in /var/log/messages?
I will ask for a FSCK to my VPS provider...

 

[cPanelMichael]

It's more so /var/log/dmesg that you should pay attention to, however you can sometimes find "status timeout" messages in /var/log/messages that can indicate a failing hard drive. It's better to have your data center or system administrator investigate this to determine the specific cause of the problem.

Thank you.

 

[Kent Brockman]

Yep, I did, and they will schedule a FSCK in a nightly moment.
Thank you!