Hi. I think I dislike the idea... I think of the rotate log files as of "parts of one big file"... so the ".number" is semantically like "part-number"...
Date would only have the meaning everything before this date but after the date of the previously rotated file (if there is any). But there can be huge gaps between those dates and the actual entries in the files. >- no rename, so no race condition between rotated files Why should there be race conditions? Only logrotate rotates the logfiles. And using a date does not solve the problem that programs might still write to the "old" files. >- easier to cope with backup systems Could be true (have no idea about),.. but logs are usually not that backup critical. >- easier rules for filesystem alteration checkers like aide, samhain... But even with dates you will run into troubles with IDS as the files are removed at some point. Cheers, Chris.
smime.p7s
Description: S/MIME cryptographic signature