[Bug 731876] New: syslog-ng doesn't start automatically at boot after updating Tumbleweed base from 11.4 to 12.1
https://bugzilla.novell.com/show_bug.cgi?id=731876 https://bugzilla.novell.com/show_bug.cgi?id=731876#c0 Summary: syslog-ng doesn't start automatically at boot after updating Tumbleweed base from 11.4 to 12.1 Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: SuSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Update Problems AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: arun@gmx.de QAContact: jsrain@suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20100101 Firefox/8.0 After changing all repos to 12.1/current and running "zypper dup" (Tumbleweed +packman-tumbleweed enabled), syslog-ng is not started. Running syslog-ng by hand starts it with these two error messages: Plugin module not found in 'module-path'; module-path='/lib64/syslog-ng:/usr/lib64/syslog-ng', module='afsql' Error managing capability set, cap_set_proc returned an error; caps='= cap_syslog+ep cap_chown,cap_dac_override,cap_fowner,cap_net_bind_service+p cap_dac_read_search+e', error='Operation not permitted (1)' Using systemctl works to after the reboot, here is some information from it: ape:/lib/systemd # systemctl |grep syslog syslog.service loaded failed failed System Logging Service syslog.socket loaded active running Syslog Socket syslog.target loaded active active Syslog ape:/lib/systemd # systemctl status syslog.service syslog.service - System Logging Service Loaded: loaded (/lib/systemd/system/syslog.service; enabled) Active: failed since Mon, 21 Nov 2011 14:44:35 -0800; 1h 3min ago Process: 1099 ExecStart=/sbin/syslog-ng (code=exited, status=2) Process: 1097 ExecStartPre=/var/run/syslog-ng/addsockets (code=exited, status=0/SUCCESS) Process: 1033 ExecStartPre=/bin/systemctl stop systemd-kmsg-syslogd.service (code=exited, status=0/SUCCESS) CGroup: name=systemd:/system/syslog.service ape:/lib/systemd # systemctl start syslog.service ape:/lib/systemd # systemctl status syslog.service syslog.service - System Logging Service Loaded: loaded (/lib/systemd/system/syslog.service; enabled) Active: active (running) since Mon, 21 Nov 2011 15:48:49 -0800; 2s ago Process: 7380 ExecStart=/sbin/syslog-ng (code=exited, status=0/SUCCESS) Process: 7378 ExecStartPre=/var/run/syslog-ng/addsockets (code=exited, status=0/SUCCESS) Process: 7375 ExecStartPre=/bin/systemctl stop systemd-kmsg-syslogd.service (code=exited, status=0/SUCCESS) Main PID: 7382 (syslog-ng) CGroup: name=systemd:/system/syslog.service ├ 7381 supervising syslog-ng └ 7382 /sbin/syslog-ng Reproducible: Always Steps to Reproduce: 1. boot 2. syslog-ng doesn't start 3. happy to supply more information (logs, etc) if needed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c1
Carsten Koch-Mauthe
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c2
--- Comment #2 from Arun Persaud
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c
zj jia
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c3
--- Comment #3 from Arun Persaud
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c4
peter czanik
Other thing is the missing afsql modul. syslog-ng --version shows === syslog-ng --version syslog-ng 3.3.1 Installer-Version: 3.3.1 Revision: ssh+git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.3#master#3a736e62b27f7036ab23b91cf0839a95d0185e18 Default-Modules: affile,afprog,afsocket,afuser,basicfuncs,csvparser,dbparser,syslogformat,afsql Available-Modules: afprog,afuser,csvparser,dummy,afsocket,basicfuncs,convertfuncs,syslogformat,dbparser,confgen,affile,afmongodb Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Pcre: on === so it is compiled with afsql as default modul but this modul is not available. :-(
It is available, but in a separate package, so it does not introduce a new dependency (libdbi and database libraries), where database access is not used.
I've changed /etc/sysconfig/syslog and changed the syslog-ng parameters. === SYSLOG_NG_PARAMS="--default-modules=afprog,afuser,csvparser,dummy,afsocket,basicfuncs,convertfuncs,syslogformat,dbparser,affile,afmongodb" === Take care not to add the available modul confgen. This results here in a segmentation fault on starting syslog-ng.
My syslog-ng 3.3 package is available at https://build.opensuse.org/package/show?package=libevtlog&project=home%3Aczanik%3Asyslog-ng33 , now I added Tumbleweed to the list of targets. It removes the afsql warning, without needing to edit /etc/sysconfig/syslog (added a configure parameter). There was also a capability related message: it's coming from AppArmor. It's ugly, but still works fine. I try to investigate this, but audit.log does not show anything... CzP/syslog-ng upstream -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c5
--- Comment #5 from peter czanik
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c6
--- Comment #6 from Carsten Koch-Mauthe
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c7
--- Comment #7 from peter czanik
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c8
Christian Boltz
FYI: For the capability problem, the following line needs to be added to Apparmor ( /etc/apparmor.d/sbin.syslog-ng ):
capability dac_read_search,
Will open a separate bug for it...
Too late! ;-) I already fixed it upstream, the fix will be in AppArmor 2.7.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c9
--- Comment #9 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c10
--- Comment #10 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c11
--- Comment #11 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c12
Benjamin Brunner
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c13
--- Comment #13 from Arun Persaud
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c14
Arun Persaud
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c15
--- Comment #15 from Arun Persaud
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c16
--- Comment #16 from Arun Persaud
https://bugzilla.novell.com/show_bug.cgi?id=731876
https://bugzilla.novell.com/show_bug.cgi?id=731876#c17
Marius Tomaschewski
participants (1)
-
bugzilla_noreply@novell.com