CentOS - Jun 2010 - Logwatch, cron, and dovecot

Howdy all,

Question for anyone.

I have centos 5.x on my server.

Everyday I get a logwatch sent to my mailbox.
I usually check every couple weeks and this time I got a surprise...

Up until may 15th, the watch started with cron begin/ cron end and then went
to http begin/end....


May 16th had the selinux (which I have disabled) and dovecot listings above
the http begin.
Cron was absent.

Everyday after that is is all dovecot first, no cron.

I never had dovecot show up in my logwatch before.


So, I assume some update did something, but it was obviously 2 weeks ago or
so. I have an auto update, so I am thinking it happened with a yum update.

The selinux only happened that one time...not shown up since.

I am concerned about the cron begin/end no longer being there, don't know
why dovecot was not there to begin with....

Just did a reboot and will see what happens tomorrow...

Thanks for any help at all.




 --------------------- Selinux Audit Begin ------------------------ 

  Number of audit daemon starts: 1 
 
  Number of audit daemon stops: 1 
 
 **Unmatched Entries** 
  Started dispatcher: /sbin/audispd pid: 21352
 
 ---------------------- Selinux Audit End ------------------------- 

 
 --------------------- Dovecot Begin ------------------------

I think I found it...and I think it is a bug.

Here is a file in usr/share/logwatch/default.conf/logfiles/cron.conf

It appears this file tells it where to look for the cron file...and the cron
file location is dead wrong.

It should be /var/log/cron I believe.

Is this the correct fix to make logwatch once again grab my cron files since
5.5 update?


##########################################################################
# $Id: cron.conf,v 1.11 2005/02/24 17:05:18 kirk Exp $
##########################################################################

########################################################
# This was written and is maintained by:
#    Kirk Bauer <kirk at kaybee.org>
#
# Please send all comments, suggestions, bug reports,
#    etc, to kirk at kaybee.org.
########################################################

# What actual file?  Defaults to LogPath if not absolute path....
#Solaris is /var/cron/log -mgt
LogFile = /var/cron/log
LogFile = cron

# If the archives are searched, here is one or more line
# (optionally containing wildcards) that tell where they are...
Archive = cron.*
Archive = archiv/cron.*

*OnlyHost
*RemoveService = anacron

# vi: shiftwidth=3 tabstop=3 et