0015001: Snort restarts twice on logrotate

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0015001

ClearOS

snort

public

2017-05-20 11:15

2019-06-18 08:29

Reporter

NickH

Assigned To

Priority

normal

Severity

tweak

Reproducibility

always

Status

closed

Resolution

suspended

Platform

OS Version

Product Version

7.3.1

Target Version

Fixed in Version

Summary

0015001: Snort restarts twice on logrotate

Description

In /etc/logrotate.d/snort there are two sections, on to rotate /var/log/snort/syslog and one to rotate /var/log/snortsam. Each section restarts snort. This is silly. Both section should be combined into a single function by making the function:

/var/log/snort/syslog /var/log/snortsam {
    missingok
    postrotate
        /sbin/service snort condrestart >/dev/null 2>&1 || true
    endscript
}

This would slicken up the log rotation and save on some system resources.

Steps To Reproduce

Install and run snort and logrotate.

Tags

No tags attached.

Attached Files

Relationships

Notes
(0005691) NickH (developer) 2017-05-20 12:00	Forgot to add "sharedscripts" between the missingok and postrotate lines.

(0012201) NickH (developer) 2019-06-18 08:28	Migrated to https://gitlab.com/clearos/clearfoundation/snort/issues/3 [^]

Issue History
Date Modified	Username	Field	Change
2017-05-20 11:15	NickH	New Issue
2017-05-20 12:00	NickH	Note Added: 0005691
2017-05-23 22:12	user2	Status	new => acknowledged
2019-06-18 08:28	NickH	Note Added: 0012201
2019-06-18 08:29	NickH	Status	acknowledged => closed
2019-06-18 08:29	NickH	Resolution	open => suspended

ClearOS Bug Tracker