>> On 2020-12-13, Harald Dunkel <ha...@afaics.de> wrote: > On 12/13/20 7:10 PM, Theo de Raadt wrote: >> >> And I'm suggesting the arguments should look like this: >> >> pflogd: [priv] -s 160 -i pflog0 -f /var/log/pflog (pflogd) >> pflogd: [running] -s 160 -i pflog0 -f /var/log/pflog (pflogd) >> >> That might allow more accurate pkill targetting. >> > > Wouldn't you admit that this appears to be very fragile? If I add > some flags to the pflogd command line then I have to verify the > pkill commands in newsyslog.conf again.
You can search the whole argument list, but you only have to match a subset. For log rotation that might be the logfile name. But I would think the interface name would generally be the most likely to be a unique parameter.
