Date: Mon, 19 Mar 2012 17:27:41 +0400 (MSK) From: Dmitry Morozovsky <marck@rinet.ru> To: Gleb Smirnoff <glebius@freebsd.org> Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org Subject: Re: svn commit: r233167 - head/etc Message-ID: <alpine.BSF.2.00.1203191727280.58448@woozle.rinet.ru> In-Reply-To: <alpine.BSF.2.00.1203191721090.58448@woozle.rinet.ru> References: <201203190930.q2J9UeO5060866@svn.freebsd.org> <alpine.BSF.2.00.1203191721090.58448@woozle.rinet.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 19 Mar 2012, Dmitry Morozovsky wrote: > > Log: > > Rotate auth.log and messages at the beginning of a year. Otherwise, > > daily security checks 800.loginfail and 900.tcpwrap may produce > > false positive alerts. > > [snip] > > > -/var/log/auth.log 600 7 100 * JC > > +/var/log/auth.log 600 7 100 @0101T JC > > Did I miss newsyslog behaviour change? > > IIRC size limit is totally ignored if timed rotation is selected, and some time > ago I even proposed to change this, but it was rejected, as "one can use two > lines, one with size limit, and other with timed rotation" http://lists.freebsd.org/pipermail/freebsd-current/2009-May/thread.html#6690 -- Sincerely, D.Marck [DM5020, MCK-RIPE, DM3-RIPN] [ FreeBSD committer: marck@FreeBSD.org ] ------------------------------------------------------------------------ *** Dmitry Morozovsky --- D.Marck --- Wild Woozle --- marck@rinet.ru *** ------------------------------------------------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1203191727280.58448>