[Bug 789174] Re: rsyslog fails to create tcp socket.
On my Ubuntu 12.04 machine (upgraded from 10.04) it was apparmor blocking the tcp listener. Adding the lines network inet dgram, network inet6 dgram, network inet stream, network inet6 stream, to /etc/apparmor.d/local/usr.sbin.rsyslogd worked for me (as described on http://serverfault.com/questions/450546/rsyslogd-not-listening-on- port). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
also fixed in 14.04, YEaaah :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Marking as Fix Released based on comment #20, thanks. ** Changed in: rsyslog (Ubuntu) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Also seeing this in Raring. Was hoping to use this server for syslog, this is pretty disappointing. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
I am experiencing this on Raring as well. ** Tags added: quantal raring -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Hi, an easy fix, but it almost takes 2 years :((( What horrible. But right now it is running on port 514 . Thanks Rainer... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
an easy fix... http://www.rsyslog.com/ubuntu-repository/ -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
I thing, it is a Bug. Normal for suid progs IMHO is: make thing which need root privileges (e.g. bind to port below 1024) and then drop privileges., or not ? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
This problem is still here.. for Server LTS this is bad.. i tried also the raring version, and... GOOD WORK !! Mar 5 21:37:09 oms kernel: imklog 5.8.11, log source = /proc/kmsg started. Mar 5 21:37:09 oms rsyslogd: [origin software=rsyslogd swVersion=5.8.11 x-pid=25002 x-info=http://www.rsyslog.com;] start Mar 5 21:37:09 oms rsyslogd: rsyslogd's userid changed to 101 Mar 5 21:37:09 oms rsyslogd-2077: Could not create tcp listener, ignoring port 514. [try http://www.rsyslog.com/e/2077 ] Still there... :-( -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Can't quite believe it, centralized logging on standard 514 is not possible while not running as root or without paying 2 weeks of upstream redesign of a piece of code which could have been done correctly the first time? Going to reconsider syslog-ng... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
** Tags added: precise -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
I am also seeing this bug, and would like to see this resolved outside of the workaround to a port higher than 1024. It seems to be a problem relating to binding the TCP port later after it has already dropped permissions. My rsyslog.conf file (attached) is using the $PrivDropToUser syslog and $PrivDropToGroup syslog directives. Ubuntu Process Info syslog 29622 0.0 0.3 262268 3404 ?Sl Jun12 7:33 rsyslogd -c5 My centos/rhel systems do not exhibit this bug, but after looking it seems they are running rsyslog as root by default. RHEL Process Info root 2347 2.6 0.0 416916 2088 ?Sl Jun20 2236:08 /sbin/rsyslogd -i /var/run/syslogd.pid -c 4 Package Version: rsyslog 5.8.6-1ubuntu8 ** Attachment added: Ubuntu 12.04 LTS rsyslog.conf from rsyslog 5.8.6-1ubuntu8 https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+attachment/3265553/+files/rsyslog.conf ** Attachment removed: rsyslog.conf https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+attachment/2144742/+files/rsyslog.conf -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
The example server configuration listening on TCP 514 that fails. ** Attachment added: Ubuntu 12.04 LTS Server rsyslog.conf from rsyslog 5.8.6-1ubuntu8 Example https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+attachment/3265563/+files/rsyslog.conf -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Ryan, the pipermail link above is to upstream discussion about this. Unless there is something upstream newer than that 2 year old information, your options are: a.) run rsyslog as root by removing the $PrivDropToUser and $PrivDropToGroup options, or possibly overriding them in /etc/resolv.conf.d/ files (i'm not sure if this is possible or not). b.) use the 'Sleep' work around suggested on the thread (git commit [1]). c.) listen on a port 1024 d.) pay upstream for 2 weeks work to get the fix done correctly. [1] http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=d19806431653e6575a002ab4 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Scott, Thank you for the information. In my initial browse I'm not seeing anything updated regarding improved listener behavior, so I think that sleep workaround stands. I'm definitely looking into that over either changing the port or running as root (which I'd like to avoid if at all possible). I'll solicit my work to see how they feel on reimbursement for the proper bug fix to address the privilege race condition. Chances are they'll air on the side of cheap and stick with the ugly, unforunately. Thank you again for your response. Ryan -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
This worked for me also, port 1025. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
I changed the port from 514 to 1025(bigger that 1024 ) in /etc/rsyslog.conf file in the TCP part nad this worked. is this a wrong solution and if it is ok why don't change the port until the bug fixed in rsyslog? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Hacky workaround but if you have some devices that can only talk to port 514 drop privs and listen on a high port. (10514) # redirect traffic to high port with iptables /sbin/iptables -t nat -A PREROUTING -j REDIRECT -p udp --destination-port 514 --to-ports 10514 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
@phillyclaude Sleep will not solve the issue, the only workaround is in my reaction on 2011-06-09 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
has anyone figured out a workaround for this? Maybe adding a sleep somewhere might help? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
** Changed in: rsyslog (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
And a other problem with Drop Privileges. If you use $template ApacheRemoteCustom,/some/path/%HOSTNAME%.log rsyslog can create the file, but not write to it. To make this possible you have to change /etc/rsyslog.conf $PrivDropToGroup syslog To $PrivDropToGroup adm -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
Hi, I have the same problem. Because rsyslog drops privileges to syslog, and the required port is 514, which can only be used by a process running with root privileges (every port below 1025) http://lists.adiscon.net/pipermail/rsyslog/2010-April/011700.html workaround is a port above 1024 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/789174/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 789174] Re: rsyslog fails to create tcp socket.
** Attachment added: rsyslog.conf https://bugs.launchpad.net/bugs/789174/+attachment/2144742/+files/rsyslog.conf -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789174 Title: rsyslog fails to create tcp socket. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs