Bug 549856

Summary:	=net-analyzer/fail2ban-0.9.2 - /etc/logrotate.d/fail2ban should not set "rotate 7" / "compress"
Product:	Gentoo Linux	Reporter:	Dimitrios Semitsoglou-Tsiapos <kmhzsem>
Component:	Current packages	Assignee:	Gentoo Netmon project <netmon>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Dimitrios Semitsoglou-Tsiapos 2015-05-18 20:34:01 UTC

The logrotate script that ships with fail2ban overrides the following variables which a user may want to set globally in /etc/logrotate.conf:

rotate 7  -- Dangerous. This dictates when logs are deleted.
compress  -- Annoying. `zgrep`, for example, does not support `-r`.

A few more points:

* Global configuration is important for predictability and scripting.

* If size on the filesystem is a concern, the user can:
  * set e-mail warnings
  * set filesize-based rotation limits
  * enable compression only for logs which he or she expects to grow

* Logs are a security measure.

Reproducible: Always

Comment 1 Jeroen Roovers (RETIRED) gentoo-dev

2015-08-04 05:58:39 UTC

Did you report this upstream? I can't find anything at https://github.com/fail2ban/fail2ban/issues

Comment 2 Jeroen Roovers (RETIRED) gentoo-dev

2015-08-04 06:22:34 UTC

Fixed in 0.9.2-r1.

Comment 3 Louis Sautier (sbraz) gentoo-dev

2016-01-28 23:20:47 UTC

Reported upstream: https://github.com/fail2ban/fail2ban/pull/1312