Red Hat Bugzilla – Bug 18122
Messages syslog'd to /var/log/messages
Last modified: 2008-05-01 11:37:59 EDT
The default syslog.conf for RedHat 7.0 logs crond messages to /var/log/cron, as specified in /etc/syslog.conf: # Log cron stuff cron.* /var/log/cron and duplicates them in /var/log/messages, apparently by # Log anything (except mail) of level info or higher. # Don't log private authentication messages! *.info;mail.none;authpriv.none /var/log/messages Adding cron.none and restarting syslog successfully stops the logging to messages. 6.2 seems to create its own /var/log/cron, without the syslog prefix: root (09/24-04:22:00-11298) CMD (run-parts /etc/cron.weekly) whereas 7.0 logs identical messages via syslog to both /var/log/cron and /var/log/messages: Oct 1 04:22:00 peterj CROND[19967]: (root) CMD (run-parts /etc/cron.weekly) The vixie-cron package seems to be the same (3.0.1), just a different build. Have the build options changed to cause this duplication?
Also observed this behavior and corrected it in the same way.
*** Bug 19889 has been marked as a duplicate of this bug. ***
Additionally, logrotate fails because /etc/logrotate.d/syslog from sysklogd-1.3.33-8 contains a cron entry that conflicts with the entry in /etc/logrotate.d/cron provided by vixie-cron-3.0.1-39. Message is "error: sylog:31 duplicate log entry for /var/log/cron". Fix is to remove cron entry in /etc/logrotate.d/syslog.
Fixed in sysklogd-1.3.33-9. (The last problem mentioned can be fixed by upgrading to the Red Hat Linux 7 vixie-cron package.)
*** Bug 30372 has been marked as a duplicate of this bug. ***