Re: Strange syslog behaviour [Solved]

From	David Wright <deblis@lionunicorn.co.uk>
Newsgroups	linux.debian.user
Subject	Re: Strange syslog behaviour [Solved]
Date	2022-04-12 01:00 +0200
Message-ID	<EbbaN-87bx-7@gated-at.bofh.it> (permalink)
References	<EaRF7-7Vqm-1@gated-at.bofh.it> <EaTdT-7Wly-3@gated-at.bofh.it> <EaTxf-7WHe-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Mon 11 Apr 2022 at 12:00:38 (+0800), Jeremy Ardley wrote:
> On 11/4/22 11:46 am, David Wright wrote:
> > 
> > There are tabooext and taboopat directives for ignoring files in
> > logrotated.d, and I would have thought it reasonable to exclude
> > these sorts of housekeeping files by default, because they're very
> > likely to contain some duplication. I would file a bug against
> > logrotate.
> > 
> Keywords tabooext and taboopat don't appear in /etc/*

Looking further into this, I see that tabooext has a sizeable default
list of excluded extensions, and this list is built into logrotate, so
a tabooext directive doesn't have to be specified in logrotate.conf.
The default includes the two extensions you mentioned.

The tabooext list can be appended to, but can also be overwritten if
the necessary + is forgotten. Can we assume you haven't done that?

> I did get a hit in binary file /usr/sbin/rsyslogd

If you mean rsyslogd and not logrotate, that's presumably in the
≥testing version (ie not buster or bullseye).

$ strings /usr/sbin/rsyslogd | grep -n -e dpkg -e rpm -e ucf
$ strings /usr/sbin/logrotate | grep -n -e dpkg -e rpm -e ucf
982:.dpkg-bak
983:.dpkg-del
984:.dpkg-dist
985:.dpkg-new
986:.dpkg-old
987:.dpkg-tmp
989:.rpmnew
990:.rpmorig
991:.rpmsave
993:.ucf-dist
994:.ucf-new
995:.ucf-old
$ 

Cheers,
David.

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-11 04:10 +0200
  Re: Strange syslog behaviour [Solved] David Wright <deblis@lionunicorn.co.uk> - 2022-04-11 05:50 +0200
    Re: Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-11 06:10 +0200
      Re: Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-12 00:40 +0200
        Re: Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-12 01:10 +0200
      Re: Strange syslog behaviour [Solved] David Wright <deblis@lionunicorn.co.uk> - 2022-04-12 01:00 +0200

csiph-web