<p dir="ltr">Hi,</p>
<p dir="ltr">Probably the user doesnt have write permission to /dev so it cannot remove the stale log socket, which causes the bind to fail.</p>
<p dir="ltr">You can create the log socket somewhere else (/var somewhere) and point a symlink from dev.</p>
<p dir="ltr">Then you can give permissions to user to the directory where the log socket resides.</p>
<p dir="ltr">Hth,<br>
Bazsi</p>
<div class="gmail_quote">On Feb 13, 2016 9:50 PM, "Ryan Koss" <<a href="mailto:rkoss@128technology.com">rkoss@128technology.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Hello,<div><br></div><div>I’m trying to run syslog-ng as a non-root user. I’ve tried the following command as suggested by the site at the following URL <a href="https://www.balabit.com/wiki/syslog-ng-faq-non-root" target="_blank">https://www.balabit.com/wiki/syslog-ng-faq-non-root</a> Unfortunately I am still encountering permissions issues.</div><div><br></div><div><div>?-> /usr/sbin/syslog-ng --user user --persist-file /code/routeiqSyslog/i95/build/src/lib/util/test/syslog-ng.persist</div><div>syslog-ng: Error setting capabilities, capability management disabled; error='Operation not permitted'</div><div>Error binding socket; addr='AF_UNIX(/dev/log)', error='Address already in use (98)'</div><div>Error initializing message pipeline;</div></div><div>?-></div><div><br></div><div>Any ideas, thoughts help will be greatly appreciated.</div><div><br></div><div>Thanks,</div><div>-ryan</div></div><br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>