I've started learning bash scripting by using this guide: http://www.tldp.org/LDP/abs/abs-guide.pdf
However I got stuck at the first script:
cd /var/log
cat /dev/null > messages
cat /dev/null > wtmp
echo "Log files cleaned up."
What do lines 2 and 3 do in Ubuntu (I understand cat)? Is it only for other Linux distributions? After running this script as root, the output I get is Log files cleaned up. But /var/log still contains all the files.
Assuming the commands succeeded, /var/log/messages and /var/log/wtmp still exist but are now blank.
> is a redirection operator, implemented by the shell. Its syntax is:
command > fileThis redirects command's standard output to file.
file may also be a device node.file doesn't exist, it is created as a regular file.file already exists as a regular file and is non-empty, it is overwritten. This is typically the case in the commands you ran, where you redirected the output of cat /dev/null to messages and wtmp.file already exists as a symbolic link, the link's target is used.file already exists as a directory, you'll get an error like bash: file: Is a directory.(Of course, these operations may fail for other reasons, such as lack of permissions or a filesystem error.)
The >> redirection operator is similar, but it appends to the end of non-empty regular files instead of overwriting their contents. (Another redirection operator is <. command < file uses file as command's standard input.)
null Device/dev/null is a simple device (implemented in software and not corresponding to any hardware device on the system).
/dev/null looks empty when you read from it./dev/null does nothing: data written to this device simply "disappear."Often a command's standard output is silenced by redirecting it to /dev/null, and this is perhaps the null device's commonest use in shell scripting:
command > /dev/nullYou're using /dev/null differently. cat /dev/null outputs the "contents" of /dev/null, which is to say its output is blank. > messages (or > wtmp) causes this blank output to be redirected to the file on the right side of the > operator.
Since messages and wtmp are regular files (rather than, for example, device nodes), they are turned into blank files (i.e., emptied).
>.An alternative way to clear these files would be to run:
echo -n > messages
echo -n > wtmp
The -n flag is required, or echo writes a newline character.
(This always works in bash. And I believe the default sh in every GNU/Linux distribution and other Unix-like system popularly used today supports the -n flag in its echo builtin. But jlliagre is right that echo -n should be avoided for a truly portable shell script, as it's not required to work. Maybe that's why the guide you're using teaches the cat /dev/null way instead.)
The echo -n way is equivalent in its effects but arguably is a better solution, in that it's simpler.
cat /dev/null > file opens three "files":
cat executable (usually /bin/cat), a regular file./dev/null device.fileIn contrast, echo -n > file opens only file (echo is a shell builtin).
Although this should be expected to improve performance, that's not the benefit--not when just running a couple of these commands by hand, anyway. Instead, the benefit is that it's easier to understand what's going on.
As jlliagre has pointed out (see also jlliagre's answer), this can be shortened further by simply omitting the command on the left of > altogether. While you cannot omit the right side of a > or >> expression, the blank command is valid (it's the command you're running when you just press Enter on an empty prompt), and in omitting the left side you're just redirecting the output of that command.
Redirecting from the blank command (instead of from cat /dev/null or echo -n) looks like:
> messages
> wtmpcat will list the contents of a file comming after cat to standard output and the > sends it to the file messages and wtmp where > means to first remove all contents of the file and >> would mean to ADD to the current file. In this case you are using > so the file will end up being empty.
Now for the kicker: /dev/null is a device that sends 'nothing' to the 2 files behind the >.
There is a reason to do it like this: the file is NOT removed from the system. If you would rm it and then do a touch messages the permissions might be wrong and if just after the rm something would want to write to the file it would be gone and error out. Depending on how the software is created it could crash.
As already answered, these two lines are clearing the content of the /var/log/messages and /var/log/wtmp files, or are creating them in the unlikely event they do not already exist.
However, they are based on a well established urban legend that gives /dev/null "paranormal" powers.
It actually has none so cat /dev/null is a waste of keystrokes, time and CPU cycles as it outputs absolutely nothing. Eliah Kagan's reply suggests the better approach which is using echo -n instead. This is better but not portable to some shells/OSes where it might put the '-n' string into these files.
You can go further and replace these commands by the portable and simpler:
cd /var/log
: > messages
: > wtmp
echo "Log files cleaned up."
With most shells (but not the csh based ones), you can go even further and remove the no-op command ':' :
cd /var/log
> messages
> wtmp
echo "Log files cleaned up."
> is output redirecting operator. It will redirect the output of command to file mentioned after it instead of standard output device, truncating or overwriting file's contents.
for example ls -l > demo.txt. After executing this command, "demo.txt"
will contain th output ls -l command.
Now next thing is what is this /dev/null./dev/null is the null file Is is a special file which contains nothing.
So when you execute commands
cat /dev/null > messages
cat /dev/null > wtmp
it clears the contents of "messages" and "wtmp" file by overwriting with EOF(End Of File) character.
So here you are not clearing your /var/log directory, but you are clearing the contents of these two files.
/dev/null is like a black hole. Writes made to the /dev/null are discarded. In this script, they are using /dev/null to empty the message log file.
Otherwise they could have simply used.
> /var/log/messages.
There are other ways to empty the contents of a file.
Like.
truncate -s 0 /var/log/messages
cp /dev/null /var/log/messages
But using ">" or "/dev/null" is the efficient way.
