May 6 12:44:49 mach2 kernel: audit(1115397889.346:0): avc: denied { append } for pid=32707 exe=/sbin/syslogd name=news.crit dev=dm-0 ino=3244291 scontext=root:system_r:syslogd_t tcontext=user_u:object_r:root_t tclass=file
May 6 12:44:49 mach2 kernel: audit(1115397889.346:0): avc: denied { append } for pid=32707 exe=/sbin/syslogd name=news.err dev=dm-0 ino=3244292 scontext=root:system_r:syslogd_t tcontext=user_u:object_r:root_t tclass=file
May 6 12:44:49 mach2 kernel: audit(1115397889.346:0): avc: denied { append } for pid=32707 exe=/sbin/syslogd name=news.notice dev=dm-0 ino=3244293 scontext=root:system_r:syslogd_t tcontext=user_u:object_r:root_t tclass=file
This is what I have in /etc/syslog.conf:
news.crit /var/log/news/news.crit news.err /var/log/news/news.err news.notice /var/log/news/news.notice
This is the same config I used for RH9. I'm now using RHEL ES4.
I googled on these error messages, and the only hits I got pertained to SELINUX. I turned this off, and I still get these error messages.
Does anyone know why I can't log to /var/log/news?
TIA, Bill Tangren
-- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list