tags -1 pending
On 25 October 2016 at 16:04, Sascha Steinbiss <[email protected]> wrote: > > This problem is fixed after applying the attached patch, which uses the > 'copytruncate' option in logrotate instead of 'create'. IMHO this is the > smallest impact fix for this issue, it might be worth looking at this in > suricata itself to make the file handling consistent. > Patch applied, thanks. Yes, the logfiles handling probably something to improve upstream. It also affects running suricata under different user than root. -- Arturo Borrero González
