NEVERMIND!

[Dag-Erling Smørgrav]

"Ronald F. Guilmette" <rfg at tristatelogic.com> writes:
> I forgot that newsyslog(8) should limit the size of /var/log/messages, and
> that as long as you limit the size of that to a reasnable value, and as
> long as you have newsyslog(8) only keeping a finite & reasonable number
> of "rotated out" copies, then /var won't fill up.

It can still happen, since newsyslog only runs once per hour.  If /var
fills up between two newsyslog runs, there is no guarantee that the
space freed up by deleting the oldest logs is sufficient to compress the
newest log.  The only way to really handle this issue would be to fold
newsyslog into syslog.

DES
-- 
Dag-Erling Smørgrav - des at des.no