[syslog-ng] (2nd attempt) syslog-ng and FreeBSD jails

markzero syslog-ng at darklogik.org
Wed Nov 30 22:23:01 CET 2005


Hi,

Still having problems getting logs out of my FreeBSD jails.
No errors are recorded, no clue as to why there are no logs.
My config looks like this:

---

# $Id: syslog-ng.conf,v 1.3 2005/11/25 11:24:02 mzero Exp $
# CUSTOM
# shell config

options {
  owner("syslogng");
  group("syslogng");
  dir_owner("syslogng");
  dir_group("syslogng");
  dir_perm(0750);
  perm(0640);
  sync(0);
  stats(1200);
  create_dirs(yes);
  keep_hostname(yes);
  chain_hostnames(no);
  use_time_recvd(yes);
  time_reopen(3);
  use_dns(no);
};

#----------------------------------------------------------------------

source log_main {
  unix-dgram("/var/run/log"
             owner("syslogng")
             group("syslogng")
             perm(0600));
  unix-dgram("/var/spool/postfix/dev/log"
             owner("syslogng")
             group("syslogng")
             perm(0600));
  unix-dgram("/usr/jail/hosts/ssh/root/var/run/log"
             owner("syslogng")
             group("syslogng")
             perm(0600));
  unix-dgram("/usr/jail/hosts/comms/root/var/run/log"
             owner("syslogng")
             group("syslogng")
             perm(0600));
};

source log_internal {
  internal();
};

#----------------------------------------------------------------------

# chrooted, relative paths

destination local_main {
  file("/local/$YEAR/$MONTH/$DAY-main.log");
};

destination local_internal {
  file("/local/$YEAR/$MONTH/$DAY-syslog.log");
};

destination tcp_stunnel {
  tcp("127.0.0.1"
      localip(127.0.0.1)
      port(10514)
      tcp-keep-alive(yes));
};

#----------------------------------------------------------------------

log {
  source(log_main);
  destination(local_main);
  destination(tcp_stunnel);
};

log {
  source(log_internal);
  destination(local_internal);
  destination(tcp_stunnel);
};

---

The process runs chrooted to /var/log and gives no errors. Logs appear
correctly from the host machine, but not from any of the jails.

Anybody know what's wrong, is this a bug?

M

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
0160 A46A 9A48 D3B0 C92F B690 17FB 4B72 0207 ED43
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 825 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20051130/6ff4578b/attachment.pgp


More information about the syslog-ng mailing list