Re: Rotate audit log?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/5/05, Steve G <linux_4ever@xxxxxxxxx> wrote:
> >Is there something other than the size of the logfile that can be used
> >to cause the rotation? Would an RFE for a command to the deamon to cause
> >a rotation be appropriate? How about something in the config file to
> >tell it "daily" or similar?
>
> OK. I thought about this problem. Keeping track of time and deciding when to
> rotate is an ugly problem. What I decided to do is make sigusr1 force a rotation
> of the logs.
>
> I added a rotate command to the initscript so that you can do "service auditd
> rotate". Then I created a small script that is stored in the docs directory,
> /usr/share/doc/audit-1.0.10/auditd.cron, since I don't want it installed by
> default. The script is intended to be used with cron so that you can force a
> rotation at whatever is convenient - daily, weekly, every 12 hours.
>

Wouldnt it be better to add this to logrotate? There are several
programs that get rotated and get a signal to them to get to a new
log. The details being getting the signal without losing events or
soemthing.. need more sleep.


--
Stephen J Smoogen.
CSIRT/Linux System Administrator

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux