adjust rsyslogd to log cron to it's own file, and to not include cron or mail in main syslog file

install.sh

@@ -24,12 +24,10 @@ fi
 # set webmaster email address, used below
 WEBMASTER=webmaster@`hostname -d`
 
-# have packages automatically start/restart/stop after install/upgrade/uninstall
-if [[ -f /usr/sbin/policy-rc.d ]]; then
-  sed -i "s|exit 101|exit 0|g" /usr/sbin/policy-rc.d
-fi
+# set needrestart to list only, which is also default for unattended upgrades
 if [[ -f /etc/needrestart/needrestart.conf ]]; then
-  sed -i "s|^#\$nrconf{restart} = 'i';|\$nrconf{restart} = 'a';|g" /etc/needrestart/needrestart.conf
+  sed -i "s|^#\$nrconf{restart} = 'i';|\$nrconf{restart} = 'l';|g" /etc/needrestart/needrestart.conf
+  # 'l' = list only, change to 'a' for automatic restart or 'i' for interactive
   # disable kernelhints (no warnings about currently running kernel version)
   echo '$nrconf{kernelhints} = 0;' > /etc/needrestart/conf.d/kernelhints.conf
 fi
@@ -115,6 +113,11 @@ sed -i 's|.*RuntimeMaxFiles=.*|RuntimeMaxFiles=10|g' /etc/systemd/journald.conf
 sed -i 's|.*MaxRetentionSec=.*|MaxRetentionSec=1week|g' /etc/systemd/journald.conf
 systemctl restart systemd-journald.service
 
+# adjust rsyslogd to log cron to it's own file, and to not include cron or mail in main syslog file
+sed -i 's|^#cron\.\*|cron\.\*|' /etc/rsyslog.d/50-default.conf
+sed -i 's|^\*\.\*;auth,authpriv\.none|\*\.\*;auth,authpriv\.none;mail\.none;cron\.none|' /etc/rsyslog.d/50-default.conf
+systemctl restart rsyslog
+
 # install some handy extra packages
 DEBIAN_FRONTEND=noninteractive apt-get -y install gdu exa pwgen net-tools