For anyone using my RHEL5 rpms.. I'm sorry to say that the upgrade procedure is a bit broken. I've mistakingly used the RPM %preun and %postun to stop syslog-ng and remove the selinux module. It turned out that these sections are run after upgrades too, not just for un-installs, so upgrading the rpm ended by running: /etc/rc.d/init.d/syslog-ng stop chkconfig --del syslog-ng semodule -l | grep -q syslog_ng && semodule --remove=syslog_ng So, for upgrading from syslog-ng-2.0.3 to syslog-ng-2.0.4 I'd recommend doing: rpm -ev syslog-ng rpm -ivh syslog-ng-2.0.4-3.el5.i386.rpm mv /etc/syslog-ng/syslog-ng.conf.rpmsave /etc/syslog-ng/syslog-ng.conf Instead of the normal "yum update" or "rpm -Uvh syslog-ng...". http://tanso.net/yum/repodata/repoview/syslog-ng-0-2.0.4-3.el5.html -jf