On Wednesday, March 18, 2020 3:20:17 PM CET Dusty Mabe wrote:
I guess it would be worth analyzing the problem space a bit:
- in the past how many people do we think had logrotate installed and not cron?
I am worried more about automated provisioning rather than manual installations.
- what are the worst case scenarios if logrotate.timer defaults to
off?
- Running out of disk space.
- Violation of privacy and retention terms.
- what are the worst case scenarios if logrotate.time defaults to on?
- Unexpected data loss.
- Security holes triggered by (previously ineffective) insecure logrotate
configurations as, for example, this one:
https://bugzilla.redhat.com/CVE-2019-10143
Kamil