[opensuse-arm] Syslog problems
I have 2 problems with syslog I can't seem to solve. The first is /dev/log not accepting connections: # logger "Log string" logger: socket /dev/log: Connection refused This causes ntpd.service to fail. systemd-journald.service is running, but lsof /dev/log shows lots but nothing with /dev/log in the NAME column. The second is a truckload of syslog audit messages being pooped all over the serial terminal, which makes the terminal almost unusable. I already uninstalled all apparmor rpms (except libapparmor1) and this stuff keeps on spurting forth. It's factory with all rpms up to date (there was a big lot, 20150401 "Tumbleweed). It's possible I broke it with excessive use of systemctl. Which parts should I check to get this under control again? I had installed the syslog-ng package and syslog-service, both uninstalled again. Is it relevant that /var is on its own ext4 partition? Thanks muchly, Volker -- Volker Kuhlmann http://volker.top.geek.nz/ Please do not CC list postings to me. -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
On Tue 21 Apr 2015 19:42:23 NZST +1200, Volker Kuhlmann wrote:
# logger "Log string" logger: socket /dev/log: Connection refused
This one has nothing to do with ARM as it turns out, only with factory. # rpm -q systemd systemd-219-3.1.armv7hl /usr/share/doc/packages/systemd/NEWS CHANGES WITH 214: * The /dev/log socket and /dev/initctl FIFO have been moved to /run, and have been replaced by symlinks. This allows connecting to these facilities even if PrivateDevices=yes is used for a service (which makes /dev/log itself unavailable, but /run is left). This also has the benefit of ensuring that /dev only contains device nodes, directories and symlinks, and nothing else. Nice idea with the symlink, but obviously the symlink didn't make it to /dev/log. # rm /dev/log # ln -s /run/systemd/journal/dev-log /dev/log Fixes it until the next reboot. Still looking for the cause of the audit deluge. Volker -- Volker Kuhlmann http://volker.top.geek.nz/ Please do not CC list postings to me. -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
Volker Kuhlmann wrote:
On Tue 21 Apr 2015 19:42:23 NZST +1200, Volker Kuhlmann wrote:
# logger "Log string" logger: socket /dev/log: Connection refused
This one has nothing to do with ARM as it turns out, only with factory.
# rpm -q systemd systemd-219-3.1.armv7hl
/usr/share/doc/packages/systemd/NEWS
CHANGES WITH 214: * The /dev/log socket and /dev/initctl FIFO have been moved to /run, and have been replaced by symlinks. This allows connecting to these facilities even if PrivateDevices=yes is used for a service (which makes /dev/log itself unavailable, but /run is left). This also has the benefit of ensuring that /dev only contains device nodes, directories and symlinks, and nothing else.
Nice idea with the symlink, but obviously the symlink didn't make it to /dev/log.
# rm /dev/log # ln -s /run/systemd/journal/dev-log /dev/log
Fixes it until the next reboot.
I also run into this a couple of weeks ago. I've added this line to /etc/rsyslog.conf to work around it: $AddUnixListenSocket /dev/log Not sure whether this is the correct solution though. Ciao, Michael.
On Thu 23 Apr 2015 18:23:16 NZST +1200, Michael Ströder wrote:
# rm /dev/log # ln -s /run/systemd/journal/dev-log /dev/log
Fixes it until the next reboot.
I've added this line to /etc/rsyslog.conf to work around it:
$AddUnixListenSocket /dev/log
Not sure whether this is the correct solution though.
Thanks! There seems to be an attempt by systemd to clear /dev out of everything not device or symlink, which means systemd should be configured to create/maintain that symlink. I haven't yet looked into it. Otherwise I need syslog-ng, when I last looked at rsyslog, it was so unfit for my (easy) purpose it wasn't funny. Volker -- Volker Kuhlmann http://volker.top.geek.nz/ Please do not CC list postings to me. -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
participants (2)
-
Michael Ströder -
Volker Kuhlmann