[syslog-ng] [Bug 108] New: 2.6.38+ will require CAP_SYSLOG (CAP_SYS_ADMIN not enough)

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Mon Jan 17 23:13:51 CET 2011


https://bugzilla.balabit.com/show_bug.cgi?id=108

           Summary: 2.6.38+ will require CAP_SYSLOG (CAP_SYS_ADMIN not
                    enough)
           Product: syslog-ng
           Version: 3.2.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: arekm at maven.pl
Type of the Report: enhancement
   Estimated Hours: 0.0


2.6.38+ kernels (linus git) reports:

[    9.890305] WARNING: at kernel/printk.c:430 do_syslog+0x427/0x452()
[    9.890318] Hardware name: 2764CTO
[    9.890320] Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated and denied).

when syslog tries to do syslogging.

Additionally I'm geting:
[root at t400 ~]# /usr/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf
Error opening file for reading; filename='/proc/kmsg', error='Operation not permitted (1)'
Error initializing source driver; source='s_sys', id='s_sys#0'
Error initializing message pipeline;

which likely is due to the same problem.

Commit:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ce6ada35bdf710d16582cc4869c26722547e6f11


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list