The default syslog.conf for RedHat 7.0 logs crond messages to
/var/log/cron, as specified in
# Log cron stuff
and duplicates them in /var/log/messages, apparently by
# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
Adding cron.none and restarting syslog successfully stops the logging to
6.2 seems to create its own /var/log/cron, without the syslog prefix:
root (09/24-04:22:00-11298) CMD (run-parts /etc/cron.weekly)
whereas 7.0 logs identical messages via syslog to both /var/log/cron and
Oct 1 04:22:00 peterj CROND: (root) CMD (run-parts /etc/cron.weekly)
The vixie-cron package seems to be the same (3.0.1), just a different
build. Have the build options changed to cause this duplication?
Also observed this behavior and corrected it in the same way.
*** Bug 19889 has been marked as a duplicate of this bug. ***
Additionally, logrotate fails because /etc/logrotate.d/syslog from
sysklogd-1.3.33-8 contains a cron entry that conflicts with the entry
in /etc/logrotate.d/cron provided by vixie-cron-3.0.1-39. Message is
"error: sylog:31 duplicate log entry for /var/log/cron". Fix is to
remove cron entry in /etc/logrotate.d/syslog.
Fixed in sysklogd-1.3.33-9.
(The last problem mentioned can be fixed by upgrading to the Red Hat Linux 7
*** Bug 30372 has been marked as a duplicate of this bug. ***