Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 549856 - =net-analyzer/fail2ban-0.9.2 - /etc/logrotate.d/fail2ban should not set "rotate 7" / "compress"
Summary: =net-analyzer/fail2ban-0.9.2 - /etc/logrotate.d/fail2ban should not set "rota...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Netmon project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-05-18 20:34 UTC by Dimitrios Semitsoglou-Tsiapos
Modified: 2016-01-28 23:20 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dimitrios Semitsoglou-Tsiapos 2015-05-18 20:34:01 UTC
The logrotate script that ships with fail2ban overrides the following variables which a user may want to set globally in /etc/logrotate.conf:

rotate 7  -- Dangerous. This dictates when logs are deleted.
compress  -- Annoying. `zgrep`, for example, does not support `-r`.

A few more points:

* Global configuration is important for predictability and scripting.

* If size on the filesystem is a concern, the user can:
  * set e-mail warnings
  * set filesize-based rotation limits
  * enable compression only for logs which he or she expects to grow

* Logs are a security measure.

Reproducible: Always
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2015-08-04 05:58:39 UTC
Did you report this upstream? I can't find anything at https://github.com/fail2ban/fail2ban/issues
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2015-08-04 06:22:34 UTC
Fixed in 0.9.2-r1.
Comment 3 Louis Sautier (sbraz) gentoo-dev 2016-01-28 23:20:47 UTC
Reported upstream: https://github.com/fail2ban/fail2ban/pull/1312