[gentoo-hardened] syslog-ng can't read /proc/kmsg

[Richard Simpson]

I have the following problem with a new installation (2.6.7-r7): When
booting in enforcing mode, syslog-ng fails to start, giving the message-
Error opening file /proc/kmsg for reading (Operation not permitted).

The denial log looks like this:
avc: denied { sys_admin } for pid=3937 exe=/usr/sbin/syslog-ng capability=21
scontext=system_u:system_r:syslogd_t
tcontext=system_u:system_r:syslogd_t tclass=capability

Strangely, when booting in permissive mode, no denial is logged.

Any ideas?

Thanks,
Richard Simpson


--
gentoo-hardened@g.o mailing list