8 Apr
2009
8 Apr
'09
10:52 a.m.
Hi, On Tue, Apr 7, 2009 at 9:52 PM, Charles Jennings <jennings.charles.e.security@gmail.com> wrote:
Syslog-NG Version:
[ cut ] I'd check first whether ntpd runs in a chrooted environment or not. When it is chrooted and syslog-ng is restarted (without using the keep-alive option for /dev/log) then ntpd won't be able to continue logging (/dev/log gets recreated). For chroot-ed apps you can add the log socket to the syslog-ng sources. For example chrooted postfix needs unix-dgram("/var/spool/postfix/dev/log"); Regards, Sandor