[rsyslog] Kernel facility & testing with logger command

Rainer Gerhards rgerhards at hq.adiscon.com
Fri Sep 5 16:04:30 CEST 2008


Out of my head, 98% sure: logger (and/or sylsog() call and or imuxsock) does not permit to use the kernel facility. This is to prevent someone from pretending to be the kernel.

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Jorge Fábregas
> Sent: Friday, September 05, 2008 4:03 PM
> To: rsyslog at lists.adiscon.com
> Subject: [rsyslog] Kernel facility & testing with logger command
> 
> Hello everyone,
> 
> I'm using rsyslog for the first time and before getting into its
> features I'm
> doing some basic tests... This is a portion of what I have on my
> rsyslog.conf:
> 
> #KERN FACILITY
> kern.=emerg     /var/log/syslog/kern/00-emerg
> kern.=alert     /var/log/syslog/kern/01-alert
> kern.=crit      /var/log/syslog/kern/02-crit
> kern.=err       /var/log/syslog/kern/03-err
> kern.=warning   /var/log/syslog/kern/04-warning
> kern.=notice    /var/log/syslog/kern/05-notice
> kern.=info      /var/log/syslog/kern/06-info
> kern.=debug     /var/log/syslog/kern/07-debug
> 
> If I do any test with the logger command using the kern facility (and
> any
> severity) I don't see my message on any of the above files. Example:
> 
> logger -p kern.debug "this is a test"
> 
> I tried all the other facilities and they all work fine. It's just the
> kern
> facility.
> 
> What am I missing ?  :)
> 
> Thanks in advance,
> Jorge
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog



More information about the rsyslog mailing list