[Bug 789174] Re: rsyslog fails to create tcp socket.

[Ryan Kather]

I am also seeing this bug, and would like to see this resolved outside
of the workaround to a port higher than 1024.  It seems to be a problem
relating to binding the TCP port later after it has already dropped
permissions.  My rsyslog.conf file (attached) is using the
$PrivDropToUser syslog and $PrivDropToGroup syslog directives.

Ubuntu Process Info
syslog   29622  0.0  0.3 262268  3404 ?        Sl   Jun12   7:33 rsyslogd -c5

My centos/rhel systems do not exhibit this bug, but after looking it
seems they are running rsyslog as root by default.

RHEL Process Info
root      2347  2.6  0.0 416916  2088 ?        Sl   Jun20 2236:08 /sbin/rsyslogd -i /var/run/syslogd.pid -c 4

Package Version:  rsyslog 5.8.6-1ubuntu8


** Attachment added: "Ubuntu 12.04 LTS rsyslog.conf from rsyslog 5.8.6-1ubuntu8"
   https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+attachment/3265553/+files/rsyslog.conf

** Attachment removed: "rsyslog.conf"
   https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+attachment/2144742/+files/rsyslog.conf

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/789174

Title:
  rsyslog fails to create tcp socket.

Status in “rsyslog” package in Ubuntu:
  Confirmed

Bug description:
  Binary package hint: rsyslog

  My package:
  ii  rsyslog                                               4.6.4-2ubuntu4

  The thing is that when starting rsyslog first drop privileges and then
  tries to create socket and more. This seems to be a bug, because the
  same configuration works fine on 10.04. Configuration is attached.

  rsyslog output:
  May 27 18:37:55 ubuntu01 kernel: imklog 4.6.4, log source = /proc/kmsg started.
  May 27 18:37:55 ubuntu01 rsyslogd: [origin software="rsyslogd" swVersion="4.6.4" x-pid="5547" x-info="http://www.rsyslog.com"] (re)start
  May 27 18:37:55 ubuntu01 rsyslogd: rsyslogd's groupid changed to 103
  May 27 18:37:55 ubuntu01 rsyslogd: rsyslogd's userid changed to 101
  May 27 18:37:55 ubuntu01 rsyslogd-2039: Could no open output pipe '/dev/xconsole' [try http://www.rsyslog.com/e/2039 ]
  May 27 18:37:55 ubuntu01 rsyslogd-2077: Could not create tcp listener, ignoring port 514. [try http://www.rsyslog.com/e/2077 ]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions