[CentOS] Bug in yum Logwatch reporting

Robert Nichols rnicholsNOSPAM at comcast.net
Fri Apr 3 18:28:00 UTC 2009


Brett Serkez wrote:
> I've been noticing yum updates on several servers I manage over the
> last few weeks, which I know I didn't perform and could not explain
> until this morning.  At first I suspect a break-in, but found no other
> evidence or reason an intruder would run the yum updates I was
> viewing.
> 
> Yum updates are logged in /var/log/yum.log, which is what Logwatch
> scans.  Seems that the format of the log entries is: "MMM DD", the
> year is missing!   This morning looking at this log sequentially I
> noticed I did do yum updates on Apr 02 and Apr 03 as reported in last
> night's logwatch, but not April of 2009, but rather April of 2008!
> 
> Has anyone else noticed this behavior and/or know if there is a fix in
> progress for it?

That's why the logrotate default for yum.log was changed to "yearly"
in the 5.3 updates.

-- 
Bob Nichols     "NOSPAM" is really part of my email address.
                 Do NOT delete it.



More information about the CentOS mailing list