Hello,
Recently logwatch package was updated.
The cron file (from cron.daily) was removed and replaced with systemd.timer.
But logwatch.timer is not activated automatically, which means the users
who use logwatch will stop getting daily "auditing" emails and may not
realize this for some days that emails from logwatch have stopped coming.
This requires manual intervention to activate logwatch.timer.
Since keeping an eye on logs is very important thing to do, this should
be put as NEWS item. (in my opinion).
Additionally, current logwatch.service calls "/usr/sbin/logwatch" alone.
Which means by default it sends output to systemd journal. (whereas cron
based timer used to send an email to root which could be an alias to
real email address)
To preserve the existing behaviour, the ExecStart line should be changed
to ExecStart=/usr/bin/logwatch --output mail"
Even if this is not made a news item, this email is also sent to alert
those users who use logwatch that they need to take following actions:
1) pacman -Syu
2) cat /usr/lib/systemd/system/logwatch.service.d/local.conf
[Service]
ExecStart=
ExecStart=/usr/bin/logwatch --output mail
3) systemctl daemon-reload
4) systemctl --now enable logwatch.timer
Regards,
Amish.
