On Wed, Oct 10, 2012 at 12:02 PM, Dominique Leuenberger a.k.a DimStar <DimStar@opensuse.org> wrote:
Quoting Per Jessen <per@computer.org>:
There is (still) no business case for removing syslog from the default, so presumably it won't happen.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1951
(Not to try to argue about the quality of the syslog-ng! ANY package installed by default offers a default surface for attack... this is NOT the only CVE there is for syslog-ng).
I have to agree. I'm all for supporting syslog, in fact I believe it's quite superior to journal, but that doesn't mean installing it in tandem with journal when its features aren't required makes sense. If average desktop users have no need for all the extra functionality of syslog, like remote logging, then average desktop users don't need it installed. The "average grandma walking out the walmart" can still ask for help, because journal still logs relevant diagnostic information. Only differently. The pain of accessing journal's binary log is only paid then, and the benefit of not having it by default, as pointed out by dimstar, is many-faceted. Not just performance, not just power consumption, not just security. A mix of all. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org