On Tue, 24 Sep 2013, Mayur Patil wrote:
Hi David Sir,
On Ubuntu 12.04 32 bit, it returns
root@logser# dpkg -l | grep rsyslog
rc rsyslog 5.8.6-1ubuntu8.1 reliable system and kernel logging
daemon
but it has not installed
should I remove rsyslog package by dpkg-remove rsyslog
or possibly apt-get purge rsyslog
If that so, the files installed by this package are
http://fpaste.org/41735/ would be removed. What would be the next step for
this problem?
well, one thing you can do is make copies of these files before you purge the
package, and then put them back yourself.
looking at these files (and removing directories)
1. /etc/rsyslog.conf
this is a file you are going to be changing anyay
2. /etc/default/rsyslog
this is used in conjuction with #5 to start and stop rsyslog (this is where
command line parameters for rsyslog are stored)
3. /etc/logrotate.d/rsyslog
this is unlikely to be used directly, but it's a template to use to create your
own version. logrotate is one program you can use to rotate your files to keep
your disks from filling up.
4. /etc/apparmor.d/usr.sbin.rsyslogd
In many ways, this is one of the most interesting, or least interesting files in
the whole batch. If you just remove it, you allow rsyslog unrestricted access
(which is very convienient), but if you keep it, you need to be very aware of
what it allows rsyslog to do (where it allows rsyslog to read and/or write
files). I would suggest getting rid of it to start with, then when you get
rsyslog working the way you want it, look at adding it back in to gain the
security protection AppArmor provides.
5. /etc/init/rsyslog.conf
This is the part that actually starts rsyslog. This is probably where you will
need to change something to tell the startup scripts that rsyslogd is in a
different place.
6. /etc/init/dmesg.conf
what's in this file?
7. /etc/logcheck/ignore.d.server/rsyslog
this is a tool I'm not familiar with, it looks like it's trying to avoid a
feedback look of having logcheck find the files that rsyslog creates and feed
them back to rsyslog, you will probably need to tinker with this a lot.
David Lang
Seeking for guidance,
Thanks !!
*
--
Cheers,
Mayur*.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
