[syslog-ng] [Bug 108] 2.6.38+ will require CAP_SYSLOG (CAP_SYS_ADMIN not enough)

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Mon Jul 4 08:21:46 CEST 2011


https://bugzilla.balabit.com/show_bug.cgi?id=108





--- Comment #23 from Gergely Nagy <algernon at balabit.hu>  2011-07-04 08:21:46 ---
(In reply to comment #22)
> (In reply to comment #21)
> > Created an attachment (id=39)
 --> (https://bugzilla.balabit.com/attachment.cgi?id=39) [details] [details]
> > Fix backported to 3.2.
> 
> ---[snip]---
> 
> > I backported it to 3.2, the (untested) patch is attached. It is also available from the bz/108/cap_syslog branch of my syslog-ng 3.2 git repo:
> > http://git.balabit.hu/?p=algernon/syslog-ng-3.2.git;a=shortlog;h=bz/108/cap_syslog
> > 
> 
> Gergely,
> 
> The above syslog-ng 3.2 patch still has problems.  In Fedora 15 systems the daemon fails to restart
> (RPM upgrade) and manually starting it produces the following error:
> --------
> syslog-ng: Error parsing capabilities: cap_net_bind_service,cap_net_broadcast,cap_net_raw,\
> cap_dac_read_search,cap_dac_override,cap_chown,cap_fowner=p cap_syslog=ep
> --------
>

Interesting... That suggest it doesn't recognise cap_syslog=ep, which is weird. I'll see what I can do.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list