Re: Why change from syslog-ng to rsyslog?

Am 14.05.2021 um 13:39 schrieb John Sager:
> 
> 
> On 14/05/2021 12:19, Erich Titl wrote:
>> Hi John
>>
>> Am 14.05.2021 um 12:22 schrieb John Sager:
>>> So I've fixed up to use rsyslog - I have rules to log 
>>> firewall-related stuff (I'm not using shorewall) into a separate file 
>>> and it turned out to be just a 2-line addition to rsyslog.conf. 
>>> However I also found a couple of issues with logrotate:
>>>
>>> 1) The script /usr/bin/logrotate is old and assumes the log file 
>>> group to be 'wheel' but rsyslog uses 'adm'. I fixed that with a 
>>> 'GROUP' variable in logrotate.d/syslog but perhaps the script ought 
>>> to be updated.
>>
>> Mhhhh... wheel used to be one of these noone knows why groups. The 
>> group used by rsyslog is about as configurable as the one used by 
>> logrotate. I don't know what is right or wrong.
>>
> 
> I think adm is what tends to be used on mainstream distros these days. 
> Wheel is very old: https://en.wikipedia.org/wiki/Wheel_(computing)

OK, lets just remember these are just numbers :-), wheel is 10 and adm 
is 4 or for you binary adepts 1010 or 100. So much for the difference 
and I don't even know if those numbers are universally applicable. But 
yes, we should be consistent at least internally.

> 
> Is there any reason not to use the logrotate package 
> (https://github.com/logrotate) these days?

The logrotate script was written to overcome limitations in the savelog 
used previously, so the answer is NO. The other question is do we need 
the fully blown logrotate package? If so please please port it and 
maintain it.

cheers

ET

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/