[syslog-ng] having an issue with syslog and SElinux

Gergely Nagy algernon at balabit.hu
Tue Dec 18 18:36:35 CET 2012

Frank Scalzo <fscalzo at gmail.com> writes:

> kernel: : type=1400 audit(1355841452.964:21866): avc:  denied  { fowner }
> for  pid=861 comm="syslog-ng" capability=3
> scontext=system_u:system_r:syslogd_t:s0
> tcontext=system_u:system_r:syslogd_t:s0 tclass=capability
> How do i fix this without disabling SElinux

While I'm not a SELinux expert, and I can't say for sure that I
understand the error message, but perhaps running syslog-ng with
--disable-caps would help.


More information about the syslog-ng mailing list