Issue \run\systemd\sessions -> full folder

[hardbrasil]

Hello fellas,

our folder \run is full, i remove some logs and release couple MB to initialization of services.
The folder that is full is \run\systemd\sessions and i am unable to List this directory (too many files)
my doubt is, how can i erase this content, and if is permitted to erase them.

this happen some days after the server was hacked (some web sites was phished) maybe is coincidence.

thanks

Filesystem Size Used Avail Use% Mounted on
/dev/mapper/centos-root 579G 272G 308G 47% /
devtmpfs 1.5G 0 1.5G 0% /dev
tmpfs 1.5G 0 1.5G 0% /dev/shm
tmpfs 1.5G 1.4G 107M 93% /run
tmpfs 1.5G 0 1.5G 0% /sys/fs/cgroup
/dev/sda1 473M 262M 211M 56% /boot
tmpfs 298M 0 298M 0% /run/user/0
tmpfs 298M 0 298M 0% /run/user/10021
tmpfs 298M 0 298M 0% /run/user/10004
tmpfs 298M 0 298M 0% /run/user/10008
tmpfs 298M 0 298M 0% /run/user/10018
tmpfs 298M 0 298M 0% /run/user/10009
tmpfs 298M 0 298M 0% /run/user/10026
tmpfs 298M 0 298M 0% /run/user/30

 

[Rob Taylor]

Using 'find' to list a subset of the files may workaround the limitations of 'ls' - the following command:

find /run/systemd/sessions/ -mtime -1

...will find any files newer than 1 day. (-2 = newer than 2 days and so on.)

If that works you can delete the listed files by running:

find /run/systemd/sessions/ -mtime -1 -exec rm -f {} \;

Obviously take great caution with this command and deleting files - I couldn't comment on whether you *should* delete those files and what impact that will have.