Daniel J Walsh dwalsh at
Thu Apr 8 19:06:52 UTC 2010

Hash: SHA1

On 04/08/2010 10:02 AM, Peter Czanik wrote:
> Hello,
> I'm helping to upgrade syslog-ng to current version in major Linux
> distributions. I would like to ask, if you could update syslog-ng to
> version 3.1. I'm working on the openSUSE version of syslog-ng 3.1 (
> ), and it is also being upgraded in Debian (
> ) and Gentoo (
> ) and Mandriva
> ( ).
> For a complete list of changes, please see:
> Major changes from the packaging point of view:
> - addition of new utilities:
> /usr/bin/pdbtool
> /usr/sbin/syslog-ng-ctl
Are these tools executed by init scripts or just by administrators?
> - apparmor (or SElinux in case of Fedora) needs some extra permissions:
> /var/run/syslog-ng.ctl rw,
Is this a sock_file?
> /var/run/syslog-ng/additional-log-sockets.conf r,
Why not put syslog-ng.ctl in /var/run/syslog-ng?
> capability sys_tty_config,

What other processes need to read/write in these directories or sock_files?
> Version 3.0 also added SSL support among many other changes, but that
> can't be enabled on openSUSE (configure arg: --disable-ssl): syslog-ng
> is in /sbin, openssl libs are in /usr/lib, linking from /usr is not
> allowed in /, and SSL is not available statically for security reasons.
> As far as I can see (I have a Fedora 13 snapshot installed in vmware),
> Fedora has the same problem.
> Please let me know, if you need any additional help/information to get
> syslog-ng updated for Fedora.
> Best regards,
> Peter Czanik

Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora -


More information about the devel mailing list