[syslog-ng] having an issue with syslog and SElinux

Jose Pedro Oliveira jpo at di.uminho.pt
Thu Dec 20 14:58:55 CET 2012

On 2012-12-18 14:40, Frank Scalzo wrote:
> kernel: : type=1400 audit(1355841452.964:21866): avc:  denied  { fowner
> } for  pid=861 comm="syslog-ng" capability=3 
> scontext=system_u:system_r:syslogd_t:s0
> tcontext=system_u:system_r:syslogd_t:s0 tclass=capability
> How do i fix this without disabling SElinux

Which Linux distribution are you using? And which versions of syslog-ng
and selinux? A copy of your syslog-ng configuration file would
also be helpful.

José Pedro Oliveira
* mailto:jpo at di.uminho.pt *

More information about the syslog-ng mailing list