[Leaplist] SYSLOG problem ....

[Andrew]

On May 13, 2008, at 9:10 AM, William A. Mahaffey III wrote:

> That is indeed the case (syslog/rsyslog foodfight). When I 1st  
> installed FC8, it used syslog. Upon some upgrade in the last few  
> weeks/months, it installed rsyslog. I was having other symptoms  
> (mail from logrotate about errors in logrotate command files, which  
> turned out to be multiple references to /var/log/messages, 1 for  
> syslog & 1 for rsyslog). The last upgrade apparently (tried to)  
> remove all references to syslog entirely & didn't quite get it  
> right. I have rsyslog up & running (manually restarted it) & I  
> modified the syslog file in /etc/logrotate.d to restart rsyslogd  
> instead of syslogd. Now logwatch is not working (apparently expects  
> syslogd, not rsyslogd), so I am tracing that down :-/ ....
>

Wow, that is truly surprising to me.  RHT normally does a better job  
of taking advantage of RPM's deprecation mechanisms to ensure that  
older packages won't do exactly this sort of thing, and this is also  
why they strongly encourage people to use anaconda to upgrade their  
systems -- to catch major system changes that might fall out from a  
normal RPM-based package upgrade (like what happened with the IDE ->  
ATA driver change and resulting need for fstab updates a couple of  
releases back).  That a low-level system change this significant fell  
through both sanity checks is frightening.