problems logging to /var/log/news

Bill Tangren bjt at aa.usno.navy.mil
Fri May 6 16:56:37 UTC 2005


I am getting messages in my /var/log/messages log that I don't 
understand. I am not running the RH provided inn server, but one 
compiled from sources. In my inn.conf I asked the logs to be put in the 
/var/logs/news directory. The logs are not being put there, but are 
appearing in /var/log/messages instead. I get these messages whenever I 
restart the syslog daemon:


May  6 12:44:49 mach2 kernel: audit(1115397889.346:0): avc:  denied  { 
append } for  pid=32707 exe=/sbin/syslogd name=news.crit dev=dm-0 
ino=3244291 scontext=root:system_r:syslogd_t 
tcontext=user_u:object_r:root_t tclass=file

May  6 12:44:49 mach2 kernel: audit(1115397889.346:0): avc:  denied  { 
append } for  pid=32707 exe=/sbin/syslogd name=news.err dev=dm-0 
ino=3244292 scontext=root:system_r:syslogd_t 
tcontext=user_u:object_r:root_t tclass=file

May  6 12:44:49 mach2 kernel: audit(1115397889.346:0): avc:  denied  { 
append } for  pid=32707 exe=/sbin/syslogd name=news.notice dev=dm-0 
ino=3244293 scontext=root:system_r:syslogd_t 
tcontext=user_u:object_r:root_t tclass=file


This is what I have in /etc/syslog.conf:

news.crit                /var/log/news/news.crit
news.err                 /var/log/news/news.err
news.notice              /var/log/news/news.notice

This is the same config I used for RH9. I'm now using RHEL ES4.

I googled on these error messages, and the only hits I got pertained to 
SELINUX. I turned this off, and I still get these error messages.

Does anyone know why I can't log to /var/log/news?

TIA,
Bill Tangren




More information about the redhat-list mailing list