Review question about /var/log/* files.

[Ralf Corsepius]

On Fri, 2007-02-09 at 15:37 +0100, Phil Knirsch wrote:
> Steve Grubb wrote:
> > On Friday 09 February 2007 08:53, Patrice Dumas wrote:
> >>>> What about the rotated files?
> >>> If you know their exact names ..., why not also %ghost them?
> >> The local admin could have made changes to the logrotate rules.
> > 
> > Right, that was my point in mentioning rotated logs. The admin could have set 
> > the number of kept logs to 20. So, the question is why should 1 file be 
> > ghosted when you have this open ended rotate question?
> > 
> 
> Thats a real good point. No package pwning^H^H^H^H^H^H owning any 
> logfiles in /var/log/ sounds more and more reasonable. Directories there 
> are a different matter as they clearly are connected to a specific package.
I would not put it so strictly, I'd prefer handling this on a
case-by-case basis.

Another question would be: Why does a service need a separate log file
system at all? IMO, it should be preferable to have services use syslogd
(when applicable).

[But more annoying than /var/log/* files, are package leaving trash
behind elsewhere in /var/* upon package removal]

Ralf