Create socket files

Peter Fraser petros.fraser at gmail.com
Wed Dec 23 14:40:31 UTC 2009


Hi All
The problem did seem to be that the service was not running as root as
Adam suggested. I had this in rc.conf below.
I'm assuming the second line runs the service as user daemon!?
....when I removed it, the service started.

Thanks for the help.

syslog_ng_enable="YES"
syslog_ng_config="-u daemon"
syslog_ng_pid="/var/run/syslog-ng.pid"






On Tue, Dec 22, 2009 at 9:15 PM, Glen Barber <glen.j.barber at gmail.com> wrote:
> Hi Peter
>
> On Tue, Dec 22, 2009 at 8:34 PM, Peter Fraser <petros.fraser at gmail.com> wrote:
>> Hi All
>> I wonder if anyone could help me with this problem. I followed the
>> instructions in the handbook to create some jails. It makes part of
>> the filesystem readonly which is good.
>
> This sounds like you used the "service jail" approach [1]. Correct me
> if I am wrong.
>
>> Problem is though that I tried
>> installing syslog-ng in one of the jails and when I tried to start it,
>> I got this error
>>
>>> Error binding socket; addr='AF_UNIX(/var/run/log)', error='Permission
>>> denied (13)'
>>> Error initializing source driver; source='src', id='src#0'
>>> Error initializing message pipeline;
>>> /usr/local/etc/rc.d/syslog-ng: WARNING: failed to start syslog_ng
>>
>> I think it's trying to create the socket files  /var/run/log and
>> /var/run/logpriv but can't. Is there anyway for me to create them
>> manually?
>
> It has been some time since I used that method to create jails; the
> areas that have burned me in particular were symlinking
> /usr/local/bin/perl to /usr/bin/perl and similarly for the
> security/ca_root_nss port.
>
> Re-reading the doc, /var should be made read/write as it is part of
> the jail "skeleton" filesystem, from which you create the "moving
> parts" of your jail, so to speak.  Did you create /var read-only?
>
> Regards,
>
>
> [1] - http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails-application.html
>
> --
> Glen Barber
>


More information about the freebsd-stable mailing list