You should try to disable AppArmor (rcapparmor stop), and if it helps, then add the file to /etc/apparmor.d/sbin.syslog-ngWhen I start the service at client, I'm getting the following error
Starting syslog servicesError opening file for reading; filename='/some/file.log', error='Permission denied (13)'
Error initializing source driver; source='s_mysrc'
startproc: exit status of parent of /sbin/syslog-ng: 2The file /some/file.log has -rw-rw-rw- permissions
-- Peter Czanik (CzP) <czanik@balabit.hu> BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/