I spent some time reviewing logrotate scripts because we had some
reports on logrotation when SELinux was preventing it. TL;DR -
resolved the issue, filed temporary fix for our policy and RHEL BZ.
Works ok, copy and truncate.
Logrotate sends SIGUSR1 which is prevented by SELinux, tracked under
Similar problem but SIGUSR2
For both above, I filed a RHEL BZ
https://bugzilla.redhat.com/show_bug.cgi?id=1527522 and I filed a
temporary PR to solve this via our own policy rule until RHEL 7.6 is
Candlepin - had some issues in the past, these are solved now.
Pulp - logs into syslog, no rotation needed.
Lukas @lzap Zapletal