On 2023-11-08 08:26 +0000, Bhasker C V wrote:
> I moved my syslog to a different location '/tmp/server.log'
A rather strange decision, since /tmp is usually pruned on reboot.
> This was working all fine until I moved to selinux in enforcing mode.
>
> I have tried putting selinux in permissive state and that too did not help
Most likely your problem has nothing to do with selinux, but is rather
due to the hardening features implemented in rsyslog 8.2310.0-1. Among
other things, rsyslogd now gets its own /tmp directory (PrivateTmp=yes
in rsyslog.service) which is not shared with other processes.
> Please could someone help ? Or if there is a procedure to move syslog file
> /var/log/syslog to a different location, I am happy to follow ...
If you insist on moving it to /tmp, one possibility is to use a bind
mount for /tmp/server.log. Run "systemctl edit rsyslog.service" and put
the following two lines in the file:
[Service]
BindPaths=-/tmp/server.log
You may also need a tmpfiles.d(5) snippet to create /tmp/server.log on
reboot if it does not exist.
Good luck,
Sven