Subject: /usr/lib/rsyslog/rsyslog-rotate: Questionable use of invoke-rc.d

From: Opty <[email-masked]>
Date: Tue, 1 Apr 2025 14:44:45 +0200

Package: rsyslog
Version: 8.2302.0-1+deb12u1devuan1

/usr/lib/rsyslog/rsyslog-rotate uses invoke-rc.d to notify rsyslog to
reopen logs but it doesn't work when using
policy-rcd-declarative-deny-all so shouldn't the logrotate
configuration snippet use rather 'service' ?

Regards,
Opty

---

From: Mark Hindley <[email-masked]>
Date: Tue, 1 Apr 2025 17:41:16 +0100

Control: tags -1 moreinfo

> configuration snippet use rather 'service' ?

Possibly, although all the other logrotate fragments I can find use invoke-rc.d.

Why do you have policy-rcd-declarative-deny-all installed anyway? I suppose the
rationale goes that if you deny starting services in the first place, you don't
need to rotate the logs because they will be empty/unchanged.

Mark

---

From: Opty <[email-masked]>
Date: Wed, 2 Apr 2025 13:58:20 +0200

> need to rotate the logs because they will be empty/unchanged.

Please see #881 or should I copy the story here as well?

Regards,
Opty

---

From: Mark Hindley <[email-masked]>
Date: Wed, 2 Apr 2025 17:10:57 +0100

Control: forcemerge 881 -1

> Please see #881 or should I copy the story here as well?

No. Really these are all the same issue. I will merge them for now while we look
at the detail.

Mark