[syslog-ng] [Bug 108] 2.6.38+ will require CAP_SYSLOG (CAP_SYS_ADMIN not enough)
bugzilla at bugzilla.balabit.com
bugzilla at bugzilla.balabit.com
Sat Sep 10 20:33:39 CEST 2011
https://bugzilla.balabit.com/show_bug.cgi?id=108
--- Comment #34 from Gergely Nagy <algernon at balabit.hu> 2011-09-10 20:33:39 ---
(In reply to comment #33)
> > > PLD uses this additional patch as workaround:
> > > http://cvs.pld-linux.org/cgi-bin/cvsweb/packages/syslog-ng/cap_syslog-vserver-workaround.patch?rev=1.1
> >
> > Version sniffing is something I hate.
>
> Well, version checking in *.c or init script is still version checking (especially if you can't detect vserver in reliable way).
I was thinking more along the lines of detecting vserver, without version sniffing. But alas, if it cannot be reliably detected, then your patch is probably
the easiest route.
> > One issue with version sniffing is, that if the kernel begins to use a two part version
>
> It will work fine with this patch even for 2 part kernel version.
Right, my bad. I misread the if. Sorry!
> Anyway this patch isn't intended for upstream. It's just a reference for other people with this issue.
It *might* be worthy of upstream inclusion. I suppose there's a reasonable number of people using the vserver patch, where the CAP_SYSLOG detection will fail.
--
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
More information about the syslog-ng
mailing list