[syslog-ng] Antw: Re: Syslog-ng sometime dies at 04:02

[Peter Michael Calum]

Still same result

I'm running RHEL5 with SE-linux disabled. Could it be, that some other things should be
activated to enable core dumps ?


[root at khk9dsg5 tmp]# 
[root at khk9dsg5 tmp]# /etc/init.d/syslog-ng restart
Stopping syslog-ng: [  OK  ]
Starting syslog-ng: [  OK  ]
/tmp
[root at khk9dsg5 tmp]# 
[root at khk9dsg5 tmp]# ps -ef | grep syslog-ng
root      2810     1  0 17:25 ?        00:00:00 /sbin/syslog-ng -p /var/run/syslogd.pid
root      2854  2759  0 17:26 pts/1    00:00:00 grep syslog-ng
root      2880  2873  0 Feb03 ?        00:00:00 /bin/sh -c /var/www/html/syslog/scripts/syslog2mysql.sh >> /var/log/php-syslog-ng/mysql.log 2>&1

[root at khk9dsg5 tmp]# kill -ABRT 2810
[root at khk9dsg5 tmp]# 
[root at khk9dsg5 tmp]# ps -ef | grep syslog-ng
root      2870  2759  0 17:27 pts/1    00:00:00 grep syslog-ng
root      2880  2873  0 Feb03 ?        00:00:00 /bin/sh -c /var/www/html/syslog/scripts/syslog2mysql.sh >> /var/log/php-syslog-ng/mysql.log 2>&1
[root at khk9dsg5 tmp]# ls -la
total 52
drwxrwxrwt  9 root root 4096 Feb 20 17:25 .
drwxr-xr-x 24 root root 4096 Feb  3 09:13 ..
drwxrwxrwt  2 root root 4096 Feb  3 09:13 .font-unix
-rw-------  1 root root  129 Feb 20 10:36 .gdm78VZ5T
srw-rw-rw-  1 root root    0 Feb  3 09:13 .gdm_socket
drwxrwxrwt  2 root root 4096 Feb  3 10:36 .ICE-unix
drwx------  2 root root 4096 Feb  3 10:36 keyring-uLO3tS
srwxr-xr-x  1 root root    0 Feb  3 10:36 mapping-root
drwx------  2 root root 4096 Feb  3 11:13 orbit-root
drwx------  2 rips rips 4096 Feb 20 07:57 ssh-rGpIU26042
drwx------  2 root root 4096 Feb  3 10:36 ssh-vuDwsR4065
-r--r--r--  1 root root   11 Feb  3 09:13 .X0-lock
drwxrwxrwt  2 root root 4096 Feb  3 09:13 .X11-unix
[root at khk9dsg5 tmp]# 

rgds,
Peter

-----Oprindelig meddelelse-----
Fra: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] På vegne af Balazs Scheidler
Sendt: 20. februar 2008 16:54
Til: Syslog-ng users' and developers' mailing list
Emne: Re: [syslog-ng] Antw: Re: Syslog-ng sometime dies at 04:02


On Wed, 2008-02-20 at 14:49 +0100, Peter Michael Calum wrote:
> Hi
> 
> echo `pwd` in the start script only shows / and there's no core file 
> 

Maybe it's prevented by AppArmor or similar tools. Try changing the
current directory to /var/tmp or /tmp.

-- 
Bazsi

_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html