FS#9831 - sysklogd doesn't support files > 2 gigs

Attached to Project: Arch Linux
Opened by Dale Blount (dale) - Thursday, 13 March 2008, 20:26 GMT
Last edited by Eric Belanger (Snowman) - Saturday, 15 March 2008, 02:59 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Eric Belanger (Snowman)
Architecture i686
Severity High
Priority Normal
Reported Version 2007.08-2
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

From sysklogd's README.1st:

* Large file support, i.e. support to write to log files that are
larger than 2 GB is not part of syslogd, but a matter of the glibc
emitting different system calls to the kernel interface. To support
large files you'll have to compile syslogd with the compiler defines
commented out in the main Makefile so that glibc adjusts the system
calls.


Possibility of lost security related logs raises the severity of this bug.
This task depends upon

Closed by  Eric Belanger (Snowman)
Saturday, 15 March 2008, 02:59 GMT
Reason for closing:  Fixed
Comment by Dale Blount (dale) - Thursday, 13 March 2008, 20:42 GMT
Opps, forgot my change to the PKGBUILD:

sed -i "s:-O3:${CFLAGS} -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE:" $startdir/src/$pkgname-$pkgver/Makefile || return 1
Comment by Eric Belanger (Snowman) - Friday, 14 March 2008, 19:18 GMT
I wasn't able to reproduce this bug on x86_64. I'll try tonight on i686 as it might be architecture dependent.

BTW, it seems that we need to use _LARGEFILE64_SOURCE instead of _LARGEFILE_SOURCE to fix this.
Comment by Dale Blount (dale) - Friday, 14 March 2008, 20:02 GMT
Yep, this was tested on i686. The sed line I used definitely worked:

# ls -lh /var/log/mail.1
-rw-r--r-- 1 root root 2.9G 2008-03-14 00:02 /var/log/mail.1

It was stopping at 2G before my rebuild.
Comment by Eric Belanger (Snowman) - Saturday, 15 March 2008, 02:59 GMT
Problem only seen in i686. Probably x86_64 has higher file size limit. Fixed in sysklogd-1.5-2.

Loading...