Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #263262

Re: Help ! No syslog anymore

Show all headers | View raw

On 2023-11-08 08:26 +0000, Bhasker C V wrote:

>  I moved my syslog to a different location  '/tmp/server.log'

A rather strange decision, since /tmp is usually pruned on reboot.

> This was working all fine until I moved to selinux in enforcing mode.
>
> I have tried putting selinux in permissive state and that too did not help

Most likely your problem has nothing to do with selinux, but is rather
due to the hardening features implemented in rsyslog 8.2310.0-1.  Among
other things, rsyslogd now gets its own /tmp directory (PrivateTmp=yes
in rsyslog.service) which is not shared with other processes.

> Please could someone help ? Or if there is a procedure to move syslog file
> /var/log/syslog to a different location, I am happy to follow ...

If you insist on moving it to /tmp, one possibility is to use a bind
mount for /tmp/server.log.  Run "systemctl edit rsyslog.service" and put
the following two lines in the file:

[Service]
BindPaths=-/tmp/server.log

You may also need a tmpfiles.d(5) snippet to create /tmp/server.log on
reboot if it does not exist.

Good luck,
Sven

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Help ! No syslog anymore Bhasker C V <bhasker@unixindia.com> - 2023-11-08 09:30 +0100
  Re: Help ! No syslog anymore Sven Joachim <svenjoac@gmx.de> - 2023-11-08 17:50 +0100
    Re: Help ! No syslog anymore Bhasker C V <bhasker@unixindia.com> - 2023-11-10 09:10 +0100
      Re: Help ! No syslog anymore Bhasker C V <bhasker@unixindia.com> - 2023-11-12 08:20 +0100
        Re: Help ! No syslog anymore Bhasker C V <bhasker@unixindia.com> - 2023-11-16 12:50 +0100

csiph-web