[syslog-ng] syslog-ng 1.4.2 and kernel messages on SunOS 5.6

[Massimo Loschi]

Hi,

I used syslog-ng 1.4.0 (very useful!) on a SunOS 5.6 sun4u host, with the
following configuration:


options { create_dirs(yes); sync(0); chain_hostnames(off); };

source local {
   sun-streams("/dev/log" door("/etc/.syslog_door"));
   internal();
};
source net { udp(ip(A.B.C.D) port(514)); };

[...]
destination dstandard {
  file("/var/log/host/$HOST/$PROGRAM/$YEAR-$MONTH/$DAY.log"
       group("mygroup")
       dir_perm(0755)
       perm(0644)
  );
};
[...]
log { source(local); source(net);
      destination(dstandard);
};


When I start syslog-ng, in /var/log/host/machine appears several strange
directories:

drwxr-xr-x   3 other        512 Mar 31 14:48 PCI-device
drwxr-xr-x   3 other        512 Mar 31 14:48 SUNW,hme0
drwxr-xr-x   3 other        512 Mar 31 14:48 SUNW,hme1
drwxr-xr-x   3 other        512 Mar 31 14:48 SunOS Release 5.6 Version
Generic_105181-17 
drwxr-xr-x   3 other        512 Mar 31 14:48 WARNING
drwxr-xr-x   3 other        512 Mar 31 14:48 cpu0
drwxr-xr-x   3 other        512 Mar 31 14:48 glm0
drwxr-xr-x   3 other        512 Mar 31 14:48 pci0 at root
drwxr-xr-x   3 other        512 Mar 31 14:48 root on 
drwxr-xr-x   3 other        512 Mar 31 14:48 sd0 at glm0
drwxr-xr-x   3 other        512 Mar 31 14:48 sd1 at glm0
drwxr-xr-x   3 other        512 Mar 31 14:50 sshd
drwxr-xr-x   3 other        512 Mar 31 14:48 su0 at ebus0
drwxr-xr-x   3 other        512 Mar 31 14:48 su1 at ebus0
drwxr-xr-x   3 other        512 Mar 31 14:48 syslog-ng


It appears the problem that the version 1.4.2 should be fix (function
parse_log_msg in file src/log.c), but instaling and running this version,
it works like the 1.4.0.

Another strange thing happens (with both 1.4.0 and 1.4.2): the directories
and the files create by syslog-ng don't have the permissions specified in the
configuration ( dir_perm(0755) perm(0644) ), but those coherent with the
umask of the root user.

It is a my stupid error in syslog-ng.conf file or someother people have
this problems?

Thanks in advance
Massimo

------------------------------------------------------------------------------
Massimo Loschi                                    E-mail: m.loschi@nextra.it
Network & Core Systems
NEXTRA S.p.A.                                        WWW: http://www.nextra.it
Via Isonzo, 55/2                                     Tel: +39 51 6139211
40033 Casalecchio di Reno                            Fax: +39 51 6114455
Bologna - ITALY
------------------------------------------------------------------------------