+++ This bug was initially created as a clone of Bug #1962318 +++

SUMMARY: RFE

1. Proposed title of this feature request

[RFE] rsyslog action.errorfile max size

2. Who is the customer behind the request?

Account: Citigroup
Account #: 411070
TAM customer: yes
CSM customer: yes
Strategic: yes

3. What is the nature and description of the request?

This is a request to add max errorfile option to rsyslog. Without a logfile size management rsyslog error file can fill up the filesystem and render the host useless.

4. Why does the customer need this? (List the business requirements here)

The solution is to mitigate host vulnerability against a possible service outage generated by a large rsyslog errorfile that can grow without limit.

5. How would the customer like to achieve this? (List the functional requirements here)

By implementing an a configuration option in rsyslog for the max size of an error file, such as other similar services already have (Eg: journald, auditd)

6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented.

Once the max error file size option is implemented we can test that that rsyslog does not create an error log file larger than max size.

7. Is there already an existing RFE upstream or in Red Hat Bugzilla?
No

8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL8, RHEL9)?
RHEL9

9. Is the sales team involved in this request and do they have any additional input?
No

10. List any affected packages or components.
rsyslog

11. Would the customer be able to assist in testing this functionality if implemented?
Yes