Andy said:
I do think it's more likely to be something missing on the broken
one that results in the file never being created, as
opposed to
something deleting the file.
A couple of recent-ish updates needed restarts. Looking at the logs from
auditd says, yep, the file is never created for some reason.
Ian