grsecurity forums

Hello .
I have little problem with my syslog-ng .
I can't run syslog-ng, when gradm is enabled

I saw this error :
io.c: bind_unix_socket(): bind failed /dev/log (Permission denided)
...

Now i can run syslog-ng only when gradm is disabled .

Problem number 2
Gradm don't want to log to my syslog-ng :/

Can smbd help me ?

problem 1: you need to make sure syslog-ng has read access to /dev/log. Check your /etc/grsec/acl

problem 2: works fine here. I use (relevant entries):

Code: Select all

source src {
        unix-stream("/dev/log");
        internal();
        pipe("/proc/kmsg");
};
filter f_grsec { match(grsec:); };
destination grsec { file("/var/log/grsecurity"); };
log { source(src); filter(f_grsec); destination(grsec); };


syslog-ng can read from /dev/log .

subject /usr/local/sbin/syslog-ng p {
/dev/log r
}

connecting to a stream socket requires rw access, and binding one requires rwcd, so change that /dev/log r line to /dev/log rwcd

-Brad

thx