From: Adam C. <ada...@be...> - 2010-07-08 23:20:38
|
your "blind dive" looks to be spot on.... the default perms on the fifo were 600 changed to 666 and so far, no problem -- Adam Cohen / IT Manager Energy Biosciences Institute / UC Berkeley 109 Calvin Lab / 510-642-7709 http://www.energybiosciencesinstitute.org On Jul 5, 2010, at 3:37 AM, Mij wrote: > Hmm, this is weird :) > > Blind dive: does anything happen with the permissions of the FIFO? > If I recall it right, ubuntu runs syslogd as an unprivileged user. > > If you sort it out, please report your answer to the list for the archives. > > If you don't, consider using Log Sucking. > > > On May 17, 2010, at 20:42 , Adam Cohen wrote: > >> greetings, >> I'm adding sshguard (r1.5rc2) to a system running Ubuntu (8.1 / intrepid) >> >> Configure for iptables, looks good >> Built from sources, looks good >> Configure /etc/syslog.conf as below: >> >> # /etc/syslog.conf Configuration file for syslogd. >> auth.info;authpriv.info |/var/log/sshguard.fifo >> auth,authpriv.* /var/log/auth.log >> *.*;auth,authpriv.none -/var/log/syslog >> >> Restart syslog >> /etc/init.d/sysklogd restart >> >> Start sshguard >> initctl start sshguard >> >> sshguard works fine as FIFO receives messages >> >> But after a while...FIFO stops receiving messages and so sshguard gets no input to scan. This seems like an Ubuntu issue but could there be something wrong with my syslog.conf? >> >> thanks >> Adam >> >> -- >> Adam Cohen / IT Manager >> Energy Biosciences Institute / UC Berkeley >> 109 Calvin Lab / 510-642-7709 >> http://www.energybiosciencesinstitute.org >> >> ------------------------------------------------------------------------------ >> >> _______________________________________________ >> Sshguard-users mailing list >> Ssh...@li... >> https://lists.sourceforge.net/lists/listinfo/sshguard-users > > > ------------------------------------------------------------------------------ > This SF.net email is sponsored by Sprint > What will you do first with EVO, the first 4G phone? > Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first > _______________________________________________ > Sshguard-users mailing list > Ssh...@li... > https://lists.sourceforge.net/lists/listinfo/sshguard-users |