Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 187232

Summary: app-admin/syslog-ng - default conf contains errors
Product: Gentoo Linux Reporter: mobidyc <mobidyc>
Component: New packagesAssignee: Mr. Bones. (RETIRED) <mr_bones_>
Status: RESOLVED FIXED    
Severity: normal CC: ingmar
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description mobidyc 2007-07-31 10:36:55 UTC
Hello,

i've installed syslog-ng today since i've read the admionistrator guide on the editor website and i've releved the following errors:

in the default /etc/syslog-ng/syslog-ng.conf file there are these two lines:
log { source(src); destination(messages); };
log { source(src); destination(console_all); };

but at the url http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch03s03.html you can see:
Define a source only once. The same source can be used in several log paths. Duplicating sources causes syslog-ng to open the source (TCP/IP port, file, etc.) more than once, which might cause problems. For example, include the /dev/log file source only in one source statement, and use this statement in more than one log path if needed.

another error, always in the default /etc/syslog-ng/syslog-ng.conf file, you have:
source src {
    unix-stream("/dev/log" max-connections(256));
    internal();
    pipe("/proc/kmsg");
};

kmsg must not be a pipe as you can see at:
http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch06s04.html
at this url there si a warning who contains:
Do not use a pipe source to read /proc/kmsg.

the source would be:
file("/proc/kmsg");

thanks to correct these if i'm right.

Regards.
Comment 1 Mr. Bones. (RETIRED) gentoo-dev 2007-08-02 04:53:47 UTC
well, pipe() obviously works since it's been that way for years but file() is more correct so I've made that change.

The src source is only defined once in the config.  You can use it as many times as you like.

Thanks for the bug report.