<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
Hello,<br>
<br>
On 03/04/2011 07:43 AM, Hidayath Basha wrote:
<blockquote
cite="mid:NNEEJGHFADGOILPBHHKLEEPHCDAA.hidayath.basha@saventech.com"
type="cite">
<meta http-equiv="Content-Type"
content="text/html; charset=ISO-8859-1">
<meta content="MSHTML 6.00.5730.13" name="GENERATOR">
<div><font size="2" face="Arial"><span class="082374106-04032011">Hi
Peter,</span></font></div>
<div><font size="2" face="Arial"><span class="082374106-04032011"></span></font> </div>
<div><font size="2" face="Arial"><span class="082374106-04032011">Thanks,
disabling apparmor really worked. Thank you very much</span></font></div>
</blockquote>
Disabling apparmor is just a workaround. The solution is to add the
files to AppArmor. If you read from the file, then a line like this to
/etc/apparmor.d/sbin.syslog-ng:<br>
/some/file.log r,<br>
If it's a destination outside of /var/log, then a line like this:<br>
/some/file.dest rw,<br>
This way your applications are still protected by AppArmor, but
syslog-ng can reach files outside of /var/log<br>
Bye,<br>
CzP<br>
<br>
<blockquote
cite="mid:NNEEJGHFADGOILPBHHKLEEPHCDAA.hidayath.basha@saventech.com"
type="cite">
<div> </div>
<div><font size="2" color="#800080" face="Arial">Thanks and regards,</font></div>
<div><font size="2" color="#800080" face="Arial"><strong>Hidayath</strong></font></div>
<div><strong></strong> </div>
<div><font size="2" color="#0000ff" face="Arial"><span
class="082374106-04032011"> </span></font></div>
<blockquote dir="ltr" style="margin-right: 0px;">
<div class="OutlookMessageHeader" dir="ltr" align="left"><font
size="2" face="Tahoma">-----Original Message-----<br>
<b>From:</b> <a class="moz-txt-link-abbreviated" href="mailto:syslog-ng-bounces@lists.balabit.hu">syslog-ng-bounces@lists.balabit.hu</a>
[<a class="moz-txt-link-freetext" href="mailto:syslog-ng-bounces@lists.balabit.hu">mailto:syslog-ng-bounces@lists.balabit.hu</a>]<b>On Behalf Of </b>Peter
Czanik<br>
<b>Sent:</b> Thursday, March 03, 2011 7:06 PM<br>
<b>To:</b> Syslog-ng users' and developers' mailing list<br>
<b>Subject:</b> Re: [syslog-ng] Permission Denied (13)<br>
<br>
</font></div>
Hello,<br>
<br>
On 03/03/2011 02:28 PM, Hidayath Basha wrote:
<blockquote
cite="mid:NNEEJGHFADGOILPBHHKLOEPECDAA.hidayath.basha@saventech.com"
type="cite">
<div><font size="2" face="Arial">When I start the service at
client, I'm getting the following error<br>
<font size="3" face="Courier New">Starting syslog servicesError
opening file for reading; filename='/some/file.log', error='Permission
denied (13)'<br>
Error initializing source driver; source='s_mysrc'<br>
startproc: exit status of parent of /sbin/syslog-ng: 2</font></font></div>
<div> </div>
<div><font size="2" face="Arial">The file /some/file.log has
-rw-rw-rw- permissions</font></div>
<br>
</blockquote>
You should try to disable AppArmor (rcapparmor stop), and if it helps,
then add the file to /etc/apparmor.d/sbin.syslog-ng<br>
Bye,<br>
<pre class="moz-signature" cols="72">--
Peter Czanik (CzP) <a moz-do-not-send="true"
class="moz-txt-link-rfc2396E" href="mailto:czanik@balabit.hu"><czanik@balabit.hu></a>
BalaBit IT Security / syslog-ng upstream
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://czanik.blogs.balabit.com/">http://czanik.blogs.balabit.com/</a>
</pre>
</blockquote>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Peter Czanik (CzP) <a class="moz-txt-link-rfc2396E" href="mailto:czanik@balabit.hu"><czanik@balabit.hu></a>
BalaBit IT Security / syslog-ng upstream
<a class="moz-txt-link-freetext" href="http://czanik.blogs.balabit.com/">http://czanik.blogs.balabit.com/</a>
</pre>
</body>
</html>