Hello,
Quick heads up: version 3.1.1 of syslog-ng is now available, which among
other things fixes a problem with pipe(). In 3.X, pipe used 100% CPU,
when a file parameter was used instead of a pipe (as was in the default
openSUSE syslog-ng.conf).
Bye,
CzP
2010-04-08 21:06 keltezéssel, Daniel J Walsh írta:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/08/2010 10:02 AM, Peter Czanik wrote:
> Hello,
>
> I'm helping to upgrade syslog-ng to current version in major Linux
> distributions. I would like to ask, if you could update syslog-ng to
> version 3.1. I'm working on the openSUSE version of syslog-ng 3.1 (
>
http://download.opensuse.org/repositories/home:/czanik:/branches:/Base:/S...
> ), and it is also being upgraded in Debian (
>
http://packages.qa.debian.org/s/syslog-ng.html ) and Gentoo (
>
http://gentoo.linuxhowtos.org/portage/app-admin/syslog-ng ) and Mandriva
> (
http://sophie.zarb.org/viewrpm/b8182fa1eee109cc655a020a2cb62f5f ).
>
> For a complete list of changes, please see:
>
http://www.balabit.com/downloads/files/syslog-ng/open-source-edition/3.0....
>
http://www.balabit.com/downloads/files/syslog-ng/open-source-edition/3.1....
>
> Major changes from the packaging point of view:
>
> - addition of new utilities:
> /usr/bin/pdbtool
> /usr/sbin/syslog-ng-ctl
>
>
Are these tools executed by init scripts or just by administrators?
> - apparmor (or SElinux in case of Fedora) needs some extra permissions:
> /var/run/syslog-ng.ctl rw,
>
Is this a sock_file?
> /var/run/syslog-ng/additional-log-sockets.conf r,
>
Why not put syslog-ng.ctl in /var/run/syslog-ng?
> capability sys_tty_config,
>
What other processes need to read/write in these directories or sock_files?
> Version 3.0 also added SSL support among many other changes, but that
> can't be enabled on openSUSE (configure arg: --disable-ssl): syslog-ng
> is in /sbin, openssl libs are in /usr/lib, linking from /usr is not
> allowed in /, and SSL is not available statically for security reasons.
> As far as I can see (I have a Fedora 13 snapshot installed in vmware),
> Fedora has the same problem.
>
> Please let me know, if you need any additional help/information to get
> syslog-ng updated for Fedora.
>
> Best regards,
> Peter Czanik
>