[syslog-ng] syslog-ng Digest, Vol 73, Issue 37

Balazs Scheidler bazsi at balabit.hu
Sat Jun 4 13:15:33 CEST 2011


On Wed, 2011-06-01 at 10:09 +1100, Scott Rochford wrote:
> Hi Frank, 
> 
> Someone must have used a so-called "smart" editor to edit this file,
> since it seems to have used fancy quotes on the console line. 
> 
> #destination console_all { file("/dev/tty12"); };
> destination console_all { file(“/dev/console”); };
> #destination loghost { udp("loghost" port(999)); };
> 
> Notice how they are different from those on the line above?  Word
> processors often replace quotes with matching pairs like that
> automatically; only plain text editors should be used to edit config
> files like this. 
> 
> Check for this kind of thing with a hex dumper or 'cat -vet': 
> 
> $ cat frank 
> #destination console_all { file("/dev/tty12"); }; 
> destination console_all { file("/dev/console"); }; 
> #destination loghost { udp("loghost" port(999)); }; 
> 
> $ cat -vet frank 
> #destination console_all { file("/dev/tty12"); };$ 
> destination console_all { file(M-bM-^@M-^\/dev/consoleM-bM-^@M-^]); };
> $ 
> #destination loghost { udp("loghost" port(999)); };$ 

I can confirm that if this is the case, it'll certainly confuse
syslog-ng.

-- 
Bazsi




More information about the syslog-ng mailing list