Hi.

I think I dislike the idea...
I think of the rotate log files as of "parts of one big file"... so the
".number" is semantically like "part-number"...

Date would only have the meaning everything before this date but after
the date of the previously rotated file (if there is any).
But there can be huge gaps between those dates and the actual entries in
the files.

>- no rename, so no race condition between rotated files
Why should there be race conditions? Only logrotate rotates the
logfiles. And using a date does not solve the problem that programs
might still write to the "old" files.

>- easier to cope with backup systems
Could be true (have no idea about),.. but logs are usually not that
backup critical.

>- easier rules for filesystem alteration checkers like aide, samhain...
But even with dates you will run into troubles with IDS as the files are
removed at some point.



Cheers,
Chris.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to