Package: rkhunter
Version: 1.4.6-9
Severity: wishlist


Hey.

Right now rkunter puts all logs directly in /var/log and it never cleans them up
so one typically gets's hundrets of these:
f -rw-r----- root:adm   /var/log/rkhunter.log.2021-05-18_08:00:25
f -rw-r----- root:adm   /var/log/rkhunter.log.2021-05-19_07:59:59
f -rw-r----- root:adm   /var/log/rkhunter.log.2021-05-20_08:00:08

when daily run of rkhunter is enabled.

It would be nice if:

a) all logs could go to a /var/log/rkhunter/ dir, shipped by the package

b) there would be a default logrotate snippet in place which compresses (the
files are typically up to ~900k in size) and cleans the files in there after
a while.
A user could then still easily override how many of them he wants to retain.

Thanks,
Chris.

Reply via email to