[syslog-ng] having an issue with syslog and SElinux

[Gergely Nagy]

Frank Scalzo <fscalzo at gmail.com> writes:

> kernel: : type=1400 audit(1355841452.964:21866): avc:  denied  { fowner }
> for  pid=861 comm="syslog-ng" capability=3
> scontext=system_u:system_r:syslogd_t:s0
> tcontext=system_u:system_r:syslogd_t:s0 tclass=capability
>
>
> How do i fix this without disabling SElinux

While I'm not a SELinux expert, and I can't say for sure that I
understand the error message, but perhaps running syslog-ng with
--disable-caps would help.

-- 
|8]