[syslog-ng] Multiple woes with sles10sp1 / syslog-ng-1.6.8-20.18

[Robin P. Blanchard]

Both problems solved by removing apparmor related kernel modules...


 

> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu 
> [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Andreas Kurz
> Sent: Tuesday, August 21, 2007 10:45 AM
> To: Syslog-ng users' and developers' mailing list
> Subject: Re: [syslog-ng] Multiple woes with sles10sp1 / 
> syslog-ng-1.6.8-20.18
> 
> On 8/21/07, Robin P. Blanchard 
> <robin.blanchard at georgiacenter.uga.edu> wrote:
> > # syslog-ng -d -f /etc/syslog-ng/syslog-ng.conf
> >
> > [snip]
> >
> > Cannot open file /export/syslog/10.10.0.2102007/08/21/messages for 
> > writing (Permission denied)
> >
> > # ls -ald /export/ ; ls -ald /export/syslog/ drwxr-xr-x 5 root root 
> > 4096 Aug 21 10:16 /export/ drwxrwsr-x 2 root root 4096 Aug 21 09:41 
> > /export/syslog/
> >
> > # fgrep "\$HOST" /etc/syslog-ng/syslog-ng.conf |fgrep messages 
> > destination localmessages { 
> > file("/export/syslog/$HOST/$YEAR/$MONTH/$DAY/localmessages"); }; 
> > destination messages { 
> > file("/export/syslog/$HOST/$YEAR/$MONTH/$DAY/messages"); }; 
> > #destination allmessages { 
> > file("/export/syslog/$HOST/$YEAR/$MONTH/$DAY/allmessages"); };
> >
> >
> >
> > So...it would apppear that:
> > 1) macro expansion is not working ? (I can hand hack-in an 
> extra "/" 
> > to force that path to look correct)
> > 2) syslog-ng cannot write to its output dir (regardless if 
> I hack in 
> > that extra "/"
> >
> >
> > Ideas ?
> 
> just one .... did you set 'create_dirs (yes);' in your global options?
> ... hmm ... but if not I would expect another error message.
> 
> Regards,
> Andreas
> 
> >
> > # uname -a
> > Linux auth 2.6.16.46-0.14-default #1 Thu May 17 14:00:09 
> UTC 2007 i686 
> > i686
> > i386 GNU/Linux
> >
> > # rpm -qa |fgrep -i syslog
> > syslog-ng-1.6.8-20.18
> >
> > ---------------------------------------
> > Robin P. Blanchard
> > Systems Integration Specialist
> > The University of Georgia
> > Center for Continuing Education
> > Conference Center & Hotel
> > fon: 706.542.2404 < > fax: 706.542.1587
> > ---------------------------------------
> > _______________________________________________
> > syslog-ng maillist  -  syslog-ng at lists.balabit.hu 
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Frequently asked questions at 
> http://www.campin.net/syslog-ng/faq.html
> >
> >
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu 
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
>