>> There's no way in hell I'd run syslogd with fsync() enabled on a
>> machine that longs anything more than 1 line per minute. Disable
>> fsync()ing in syslogd by prepending "-" to each log file you want
>> to turn it off for.
> I know that, and I've already done that as a temporary solution.
> But syslogd syncs every line written for a good reason, namely
> that if the machine crashes you don't want to lose the last few
> lines that were logged. They are the most likely place to look
> for suspicious happenings. So I want a proper fix, not a
> "disable the safety feature" kludge.
It sounds like what's needed is a facility to sync just a particular
file, combined with more frequent rotation of the logs...
Best wishes from Riley.
--- * ftp://ftp.MemAlpha.cx/pub/rhw/Linux * http://www.MemAlpha.cx/~rhw/kernel.versions.html
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/