> files from the RPMs. One of these files is the 
> /etc/logrotate.d/freshclam. I did some adjusts on the 
> user/group, so my file looks like:
> 
> #
> # Rotate FreshClam daemon log file
> #
> 
> /var/log/clamav/freshclam.log {
>     missingok
>     create 640 vscan vscan
>     postrotate
>         /bin/kill -HUP `cat /var/run/clamav/freshclam.pid 2> 
> /dev/null` 
> 2> /dev/null || true
>     endscript


I'm not certain, but I think the problem is that you're creating the log
file while freshclam is still using it.  The "create" command in logrotate
says:

      Immediately *after* rotation (*before* the postrotate script is run)
      the log file is created (with the same name as the log file just
      rotated).

Sending the HUP signal to freshclam after the create isn't what you want.
Freshclam just closes its connection to the logfile upon receiving the HUP
signal, and opens a new one upon first write.




_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to