[syslog-ng] 2.6.38: CAP_SYSLOG

[Sergey Senozhatsky]

On (02/01/11 18:20), Gergely Nagy wrote:
> On Tue, 2011-02-01 at 18:34 +0200, Sergey Senozhatsky wrote: 
> > Hello,
> > 
> > During 2.6.38 development CAP_SYSLOG has been introduced to perform syslog 
> > operations, older CAP_SYS_ADMIN is not sufficient anymore.
> 
> It's a known issue, but no suitable solution (that doesn't break in
> interesting ways under pressure) has been found yet.
>

Sorry, wasn't subscribed.


> Since CAP_SYSLOG breaks userspace, I'm hoping that this will be reverted
> before the 2.6.38 release. Though, looking at recent lkml traffic, I'll
> have to Cc a few more people regarding the issue.
> 

I'm afraid we should not count on it (commit revert).


	Sergey
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 316 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20110201/3b500d52/attachment-0001.pgp