<html><body><div><div>On RHEL 6 I am able to use the logrotate facility and compress logs using bzip2. However, when I try to use a similar method on RHEL 5, the auditd service fails to restart after the logrotate service rotates and compresses the rotated log file.</div><div><br></div><div>I found a post by Steve Grubb posted on 29 JUN 2011:</div><div> </div><div>"Logrotate should not directly rotate the audit logs. I don't supply a logrotate </div><div>configuration, but if I did it would call service auditd rotate so that auditd performs</div><div>the action. The audit daemon has to fulfill certain service guarantees that logrotate</div><div>does not care about. For example, if the audit disk partition gets full, auditd can</div><div>take the system down. Logrotate never will. So, you have to let auditd do its own</div><div>thing or you will have some issues."</div><div><br></div><div>Is this still the case? </div></div><div><br></div><div><pre style="font-family: Helvetica,Arial,sans-serif; font-size: 13px; white-space: pre-wrap" data-mce-style="font-family: Helvetica,Arial,sans-serif; font-size: 13px; white-space: pre-wrap;">Paul M. Whitney paul.whitney@icloud.com </pre></div></body></html>