having an issue with syslog and SElinux
kernel: : type=1400 audit(1355841452.964:21866): avc: denied { fowner } for pid=861 comm="syslog-ng" capability=3 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=capability How do i fix this without disabling SElinux
Frank Scalzo <fscalzo@gmail.com> writes:
kernel: : type=1400 audit(1355841452.964:21866): avc: denied { fowner } for pid=861 comm="syslog-ng" capability=3 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=capability
How do i fix this without disabling SElinux
While I'm not a SELinux expert, and I can't say for sure that I understand the error message, but perhaps running syslog-ng with --disable-caps would help. -- |8]
On 2012-12-18 14:40, Frank Scalzo wrote:
kernel: : type=1400 audit(1355841452.964:21866): avc: denied { fowner } for pid=861 comm="syslog-ng" capability=3 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=capability
How do i fix this without disabling SElinux
Which Linux distribution are you using? And which versions of syslog-ng and selinux? A copy of your syslog-ng configuration file would also be helpful. jpo -- José Pedro Oliveira * mailto:jpo@di.uminho.pt *
participants (3)
-
Frank Scalzo
-
Gergely Nagy
-
Jose Pedro Oliveira