[syslog-ng] NTPD (maybe others) not logging - No idea why...

[Sandor Geller (IT)]

Hi,

On Tue, Apr 7, 2009 at 9:52 PM, Charles Jennings
<jennings.charles.e.security at gmail.com> wrote:
> Syslog-NG Version:

[ cut ]

I'd check first whether ntpd runs in a chrooted environment or not.
When it is chrooted and syslog-ng is restarted (without using the
keep-alive option for /dev/log) then ntpd won't be able to continue
logging (/dev/log gets recreated). For chroot-ed apps you can add the
log socket to the syslog-ng sources. For example chrooted postfix
needs unix-dgram("/var/spool/postfix/dev/log");

Regards,

Sandor