On Fri, Oct 29, 2010 at 02:20:57PM +0200, Maik Ehinger wrote: > Hi, > > i deleted the log file while rsyslog is running by accident. > > If i look at the debug output (rsyslog -c5 -d -n) all seems fine. Although > the log file doesn't exist! > > Is this expexed behaviour? No warning at all? > > If i restart rsyslog the file will be created and all is fine again. > > I'm using version 5.6.0 on FreeBSD 8.1. > > Thanks > Maik > >
Yes, this is correct behavior. A filehandle to the file is held by rsyslog so it can continue to log to the file even though you have unlinked it by deleting it from another process. There is not really a need for a warning because if you did not want to delete the file, you would not have done so. Obviously, you should make the deletion require a privileged user in general, but that is simply System Admin 101. Cheers, Ken _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
