Michael,
You are a star.
I dont know what I did before but I re-installed rsyslog and changed the
PrivateTmp to no
It works now.
I can see /tmp/server.log is now pushing syslog contents
Thank you very much.
On Mon, Nov 13, 2023 at 10:24 AM Michael Biebl wrote:
> Am 13.11.23 um 10:13 schrieb Bhas
Am 13.11.23 um 10:13 schrieb Bhasker C V:
I forgot to answer the question on why I am doing this
I am experimenting on a no-log system where there is no writes
what-so-ever to /var/log (except for mails) or systemd journal
(currently kept volatile)
/tmp/ is tmpfs mounted
Attached is the rsyslo
I forgot to answer the question on why I am doing this
I am experimenting on a no-log system where there is no writes what-so-ever
to /var/log (except for mails) or systemd journal (currently kept volatile)
/tmp/ is tmpfs mounted
Attached is the rsyslog config as-it-is being used now.
On Sun, No
Am 12.11.23 um 08:18 schrieb Bhasker C V:
Hi,
I have tried removing PrivateTmp=no in the rsyslog service file and it
still doesnt work
I assume you mean PrivateTmp=yes?
I have removed the service file which I had created too.
I found that when I run the daemon manually, it works well. Hence
Hi,
I have tried removing PrivateTmp=no in the rsyslog service file and it
still doesnt work
I have removed the service file which I had created too.
I found that when I run the daemon manually, it works well. Hence I have
disabled rsyslog and I have put the daemon startup in my rc-local
But yes,
The service file you posted is not a good idea. Please remove it again.
If moving the log file out of /tmp is not an option, please run
systemctl edit rsyslog.service
and disable PrivateTmp via
[Service]
PrivateTmp=no
OpenPGP_signature.asc
Description: OpenPGP digital signature
Thanks very much.
Adding bind path did not help. I found that if I run rsyslog from
command-line as unconfined_t, it works well. It is just the extra systemd
locks which fail
I have since written a simple systemd unit file to make rsyslog work and it
has started working
# /etc/systemd/system/user
On 2023-11-08 08:26 +, Bhasker C V wrote:
> I moved my syslog to a different location '/tmp/server.log'
A rather strange decision, since /tmp is usually pruned on reboot.
> This was working all fine until I moved to selinux in enforcing mode.
>
> I have tried putting selinux in permissive
Hi,
I moved my syslog to a different location '/tmp/server.log'
This was working all fine until I moved to selinux in enforcing mode.
I have the file context as system_u:object_r:syslogd_runtime_t:s0
now, the file is empty
Strangely ...
lsof shows rsyslog is using this file
rsyslogd 25561 root
9 matches
Mail list logo
