| Summary: | app-admin/syslog-ng: create init script options/arguments file to pass extra parameters to syslog-ng. | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Miguel Sousa Filipe <miguel.filipe> |
| Component: | New packages | Assignee: | Mr. Bones. (RETIRED) <mr_bones_> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | enhancement | CC: | c.affolter, hardened |
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Attachments: |
patch for ebuild file
init script patch simple syslog-ng confd file.. |
||
patch welcome. *** This bug has been marked as a duplicate of 101387 *** Created attachment 99473 [details, diff]
patch for ebuild file
Created attachment 99474 [details, diff]
init script patch
Created attachment 99475 [details]
simple syslog-ng confd file..
Hi there, these patches are my first stab at it. I must say that I'm rather unexperienced with ebuild developtment, I could not test this yet.. (no time, busy, busy, busy... and a semi-broken gentoo system :) ) anyway, these patches serve has prototypes. thankyou in advance. best regards, |
Hi, syslog-ng can be run without root privileges, for that we only need to specify: syslog-ng [ -C <chroot-dir> ] [ -u <user> ] [ -g <group> ] when calling syslog-ng. however, /etc/init.d/syslog-ng calls syslog-ng without any parameters/argument. And there isn't a "sane" way to configure syslog-ng parameters without modifing that init script. I propose the creation of a /etc/conf.d/syslog-ng for configuration of parameters to be passed to syslog-ng on "startup". This would bring syslog-ng to parity with sysklog with respect to "file for startup parameters" feature. =) I also propose that by default, syslog-ng be set to run without root privileges ("minimum necessary privilege by default"). That will imply creating a new user/group for syslog-ng, and changing the owner-ship of: syslog-ng.conf and all default log files that get written by syslog-ng. to this new user/group. Alternatively, this behaviour can be optional, and be enabled if use flag "hardened" is active. Best regards,