On Sunday 12 November 2006 12:25, Tony Nelson wrote: >At 10:23 PM -0500 11/11/06, Gene Heskett wrote: >>On Saturday 11 November 2006 19:48, Craig White wrote: > > ... > >>>...if you install the 'audit' package, I believe that >>>it diverts the 'spew' as you call it from syslog >>>to /var/log/audit/audit.log >> >>And does logrotate currently handle that, or do I need to run that down >>and add it? > >I have audit installed. Logrotate handles the selinux secure logs on > FC5. See /etc/logrotate.d/syslog or look at /var/log/secure* So do I (audit), now. I had yum grab a bunch of those things this morning. I just noted that the FC6 install apparently didn't put in any default crontabs! So logrotate didn't run this morning. Running kcron once seems to have fixed that (I think)... -- Cheers, Gene