[syslog-ng] [Bug 108] 2.6.38+ will require CAP_SYSLOG (CAP_SYS_ADMIN not enough)

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Sat Sep 10 20:33:39 CEST 2011


https://bugzilla.balabit.com/show_bug.cgi?id=108





--- Comment #34 from Gergely Nagy <algernon at balabit.hu>  2011-09-10 20:33:39 ---
(In reply to comment #33)
> > > PLD uses this additional patch as workaround:
> > > http://cvs.pld-linux.org/cgi-bin/cvsweb/packages/syslog-ng/cap_syslog-vserver-workaround.patch?rev=1.1
> > 
> > Version sniffing is something I hate.
> 
> Well, version checking in *.c or init script is still version checking (especially if you can't detect vserver in reliable way).

I was thinking more along the lines of detecting vserver, without version sniffing. But alas, if it cannot be reliably detected, then your patch is probably
the easiest route.

> > One issue with version sniffing is, that if the kernel begins to use a two part version
> 
> It will work fine with this patch even for 2 part kernel version.

Right, my bad. I misread the if. Sorry!

> Anyway this patch isn't intended for upstream. It's just a reference for other people with this issue.

It *might* be worthy of upstream inclusion. I suppose there's a reasonable number of people using the vserver patch, where the CAP_SYSLOG detection will fail.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list