On Thu, 2010-03-18 at 12:13 -0400, Brian A. Seklecki wrote:
Guys something shit the bed with 3.0.3 on 8.0-PL:
syslog-ng thinks that "security" is equal to "auth" {"security", LOG_AUTH}, /* DEPRECATED */ This comes from the original <sys/syslog.h> in Linux. Don't tell me, I know. However syslog-ng 3.1 got decoupled from the system installed syslog.h as that proved to be less than reliable. It defines "security" as: {"security", FACILITY_CODE(13) }, I guess the patch that introduces this behaviour can easily be backported. I didn't touch the stable branch as I felt it was too risky. And I may be right, if this means that the meaning of the "security" facility has changed. (would have been quite a suprise if it happened in the 3.0 maintenance releases). To make it easier for you, here's the patch that made this change: commit 8a02601f81791a519de568f900276ceedd3ca6c9 Author: Balazs Scheidler <bazsi@balabit.hu> Date: Fri Sep 4 09:55:18 2009 +0200 [syslog-names] decouple the facility/severity codes known by syslog-ng from the system defined codes Until now syslog-ng depended on the values defined in <syslog.h> to implement the severity/facility name lookups. Since BSD uses a couple of new facility codes which are not defined on other system, this patch removes this dependency and hard-codes the values defined by RFC3164, the Linux syslog.h header and the BSD syslog.h header. This makes syslog-ng know about "ntp", "security" and "console" facilities. Even on non-BSD systems. -- Bazsi