On Mon, 22 Nov 2004 13:39:53 +0100 Balazs Scheidler <bazsi@balabit.hu> wrote:
32475 open("/proc/kmsg", O_RDONLY|O_NONBLOCK|O_NOCTTY|O_LARGEFILE) = 8
this call was successful. you need to look for the read() syscall which resulted in "Operation not permitted".
32475 open("/proc/kmsg", O_RDONLY|O_NONBLOCK|O_NOCTTY|O_LARGEFILE) = 8 . . 32475 read(8, 0x806e960, 2048) = -1 EPERM (Operation not permitted) two lines below the one you copied :) Back to the other issue: syslog-ng not reopening the files on HUP. syslog-ng 802 syslog 5w REG 9,0 2798018 71961 /home/syslog/var/log/syslog.1 (deleted) syslog-ng 802 syslog 9w REG 9,0 37841 34779 /home/syslog/var/log/messages.1 (deleted) syslog-ng 802 syslog 10w REG 9,0 458383 29060 /home/syslog/var/log/auth.log.1 (deleted) syslog-ng 802 syslog 11w REG 9,0 2597302 31908 /home/syslog/var/log/mail.log.1 (deleted) syslog-ng 802 syslog 12w REG 9,0 2597302 29263 /home/syslog/var/log/mail.info.1 (deleted) syslog-ng 802 syslog 14w REG 9,0 98466 29082 /home/syslog/var/log/daemon.log.1 (deleted) syslog-ng 802 syslog 15w REG 9,0 101443 369853 /home/syslog/var/log/debug.1 (deleted) this is what I see in lsof. If I issue restart instead reload, it works just fine. I also checked the init script I use (debian's default in sid) and it looks fine to me... br g.