Graham Toal wrote:
Are you sure it's not still writing to the old file? If it was alreadyYep that was it. So I need to stop freshclam and clamd before logrotate and start them after logrotate? What a bore!
open for write, and left open rather than opened/closed on every write,
that's a definite possibility. Even if the file is rm'd, unix can
still let a process write to an open file. The space isn't recovered
until the file is closed.
