Quote:
Originally Posted by
chacko193
I had nothing to with the execution of the script,it was executed by audomon daemon.
I don't think it would have reinstalled anything,because I don't think any provsion exists to do so.
Only bin,lbin,sbin and lib were present in /usr after deletion took place and most files were missing from them too.In /usr/bin I think only 4 files were left.I think they were view,remsh and other two startin with 'r'.
I was not suggesting that the script might have reinstalled anything, but enquiring about the possibility that somebody else of some other process could have been installing or reinstalling something in
/usr/bin after the script had previously removed the directory (perhaps even as a response to it, for example some form of configuration management)