On Tue, 10 Oct 2023, Michael Biebl wrote:

Am Di., 10. Okt. 2023 um 21:49 Uhr schrieb David Lang <[email protected]>:

I see people putting things in /etc/rsyslog.d besides configs, so locking down
/etc may trip them up.

ProtectSystem=full will make /etc read-only.

Do you have a use case in mind where rsyslog need to *write* to /etc ?

Or am I missing something, i.e. what exactly do you mean by "things"?

I've seen people thinking that /etc/rsyslog.d is a good place to use as a workdir (state of imfile progress, spool files, etc) rather than just a place to have configs.

It's a bad idea, but they see the include of *.conf that the distros tend to use and think that means that they can put other stuff there that's not *.conf and it's a good idea.

David Lang
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to