Viktor, I was able to use ISO-DATE format through SYSLOG-NG, but lost the milliseconds.
This is a non-chroot smtp log using syslog-ng 2021-11-05T17:51:25.000000-03:00 smtp21 postfix/smtp 251 - [meta sequenceId="77"] 8323E60BE3: to=<x...@hotmail.com>, relay= hotmail-com.olc.protection.outlook.com[104.47.57.161]:25, delay=2.6, delays=0.25/0.01/0.78/1.6, dsn=2.6.0, status=sent (250 2.6.0 < 4f8fccc2f1fb0f9d21570f80923c9...@xxx.com> [InternalId=47772921241407, Hostname=FR1PR80MB5195.lamprd80.prod.outlook.com] 7863 bytes in 0.248, 30.907 KB/sec Queued mail for delivery -> 250 2.1.5) BR, R Em sex., 5 de nov. de 2021 às 17:37, Rafael Azevedo <raf...@gmail.com> escreveu: > Hi Viktor, > Thanks for the reply! > > SELinux is off, but AppArmor on. > > Any further suggestions? > > Thanks > > Em sex., 5 de nov. de 2021 às 17:20, Viktor Dukhovni < > postfix-us...@dukhovni.org> escreveu: > >> On Fri, Nov 05, 2021 at 12:00:56PM -0400, Wietse Venema wrote: >> > Rafael Azevedo: >> > > After disabling chroot, it worked! >> > >> > LINUX bites, if chroot breaks relative pathnames for UNIX-domain >> > DGRAM sockets. >> >> As a test, I'd suggest instead of disabling chroot for the delivery >> agents, to also enable chroot for qmgr, and see whether the qmgr logs >> then also fail to show up. >> >> Also is there something like SELinux or AppArmor on this system? >> Between Docker and chroot, the policies might not be sophisticated >> enough to allow access to the postlog socket. >> >> -- >> Viktor. >> >
