Spam Assassin error logged when running cron task: /usr/lib/sa/sa2 -A

Kent Brockman

Well-Known Member
PartnerNOC
Jan 20, 2008
1,249
50
178
Buenos Aires, Argentina
cPanel Access Level
Root Administrator
Hello guys. I started receiving this error a couple days ago (2014/01/08)

Code:
Subject: Cron <[email protected]> /usr/lib/sa/sa2 -A
Body:
rm: cannot remove `/var/log/sa/sar27': Operation not permitted
BTW, I checked this:

Code:
root [/var/log/sa/]# ls -l /var/log/sa/sar27
ls: /var/log/sa/sar27: Input/output error
s---rwS-wx 512 272433664 33591349 0 Jan 24  1971 /var/log/sa/sar27
There are a bunch of numbered files with sequential date but this one is strange. It should have date 12/27/2013, but it's not.
How can I delete it?

And what are those group/user id's? should I be worried? are filesystem errors? how can I be sure?

Thanks in advance!

Update: googling further I found that the "sa" from /usr/lib/sa/sa2 is not from SpamAssassin. Actually is sar, instead.
http://www.sarcheck.com/sarhowto.htm
is this right?
 
Last edited:

fabin

Active Member
Nov 27, 2009
29
0
51
Gods Own Country
This has nothing to do with spam assassin or cPanel.

sar is System Activity Report and comes with package sysstat.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,202
363
Hello :)

The error message you provided indicates possible disk corruption. You can try reviewing /var/log/dmesg or /var/log/messages for additional information, or consult with your provider to see if running FSCK (File System Check) at boot time would be beneficial.

Thank you.
 

Kent Brockman

Well-Known Member
PartnerNOC
Jan 20, 2008
1,249
50
178
Buenos Aires, Argentina
cPanel Access Level
Root Administrator
Hello Michael, thanks for confirming my fears (disk problems).
The /var/log/dmesg file appears with zero size.
What should I look for in /var/log/messages?
I will ask for a FSCK to my VPS provider...
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,202
363
It's more so /var/log/dmesg that you should pay attention to, however you can sometimes find "status timeout" messages in /var/log/messages that can indicate a failing hard drive. It's better to have your data center or system administrator investigate this to determine the specific cause of the problem.

Thank you.