<div dir="ltr"><div><div>I know that syslog-ng removes those sockets, but for Mag, the systemd workaround kicked in, which means that it was opening the socket from /var/run/<I don't know the path>/syslog and not /dev/log.<br><br></div>But maybe it was /dev/log before the upgrade or something. But anyway, he has found his socket now.<br><br></div>Bazsi<br><br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr">-- <br>Bazsi<br></div></div></div>
<br><div class="gmail_quote">On Mon, Feb 22, 2016 at 10:51 AM, PÁSZTOR György <span dir="ltr"><<a href="mailto:pasztor@linux.gyakg.u-szeged.hu" target="_blank">pasztor@linux.gyakg.u-szeged.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<span class=""><br>
"Scheidler, Balázs" <<a href="mailto:balazs.scheidler@balabit.com">balazs.scheidler@balabit.com</a>> írta 2016-02-22 07:17-kor:<br>
> Hmmm, maybe that symlink should have been there in the first place and<br>
> something (syslog-ng even...) may have removed it.<br>
<br>
</span>I am almost sure, it was sng.<br>
When it get a unix domain socket in it's config, it start to listen on it<br>
in three steps:<br>
* stat()<br>
* unlink()<br>
* bind()<br>
<br>
Cheers,<br>
Gyu<br>
<div class="HOEnZb"><div class="h5">______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</div></div></blockquote></div><br></div>