wiki:experiences:igraltist:jail_syslog-ng [RSBAC: Extending Linux Security Beyond the Limits]

Releases

Current version
Git/Latestdiff: 1.5.6

Latest Snapshots
Produced after each commit or rebase to new upstream version

GIT
RSBAC source code, can be unstable sometimes

Events

No events planned

--- syslog-ng_org	2008-07-14 02:42:13.000000000 +0200
+++ syslog-ng	2008-07-14 02:42:33.000000000 +0200
@@ -36,7 +36,7 @@
 	checkconfig || return 1
 	ebegin "Starting syslog-ng"
 	[ -n "${SYSLOG_NG_OPTS}" ] && SYSLOG_NG_OPTS="-- ${SYSLOG_NG_OPTS}"
-	start-stop-daemon --start --quiet --exec /usr/sbin/syslog-ng ${SYSLOG_NG_OPTS}
+	run-jail syslog-ng start-stop-daemon --start --quiet --exec /usr/sbin/syslog-ng ${SYSLOG_NG_OPTS}
 	eend $? "Failed to start syslog-ng"
 }

;
; RSBAC JAIL definition for syslog-ng
; 20081407
;
; Installed versions:  3.2.4!t(17:50:33 21.06.2011)(hardened pcre ssl tcpd -caps -ipv6 -selinux -spoof-source -sql -static)
; 
; Tested by:
; igraltist on gentoo
 
""
"0.0.0.0"
(allow-dev-write
 allow-dev-read
 this-is-syslog
 allow-tty-open
 allow-ipc-parent
 allow-external-ipc)
()
()
(rlimit)

//