Bug 804837

Summary: typo in rsyslog.conf in syslog forwarding sample
Product: Red Hat Enterprise Linux 6 Reporter: Tuomo Soini <tis>
Component: rsyslogAssignee: Tomas Heinrich <theinric>
Status: CLOSED NEXTRELEASE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: low Docs Contact:
Priority: unspecified    
Version: 6.2CC: pvrabec
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-03-20 17:42:59 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Tuomo Soini 2012-03-19 21:55:53 UTC
Description of problem:

There is a typo in rsyslog.conf

--- a/rsyslog.conf
+++ b/rsyslog.conf
@@ -67,7 +67,7 @@ local7.*                                                /var/l
 #
 # An on-disk queue is created for this action. If the remote host is
 # down, messages are spooled to disk and sent when it is up again.
-#$WorkDirectory /var/spppl/rsyslog # where to place spool files
+#$WorkDirectory /var/spool/rsyslog # where to place spool files
 #$ActionQueueFileName fwdRule1 # unique name prefix for spool files
 #$ActionQueueMaxDiskSpace 1g   # 1gb space limit (use as much as possible)
 #$ActionQueueSaveOnShutdown on # save messages to disk on shutdown

And rsyslog package is not including /var/spool/rsyslog dir.

--- a/rsyslog.spec
+++ b/rsyslog.spec
@@ -150,6 +150,7 @@ install -d -m 755 $RPM_BUILD_ROOT%{_initrddir}
 install -d -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig
 install -d -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d
 install -d -m 700 $RPM_BUILD_ROOT%{rsyslog_pkidir}
+install -d -m 700 $RPM_BUILD_ROOT%{_var}/spool/rsyslog
 
 install -p -m 755 %{SOURCE1} $RPM_BUILD_ROOT%{_initrddir}/rsyslog
 install -p -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/rsyslog.conf
@@ -214,6 +215,7 @@ mv /var/lock/subsys/rsyslogd /var/lock/subsys/rsyslog
 %dir %{rsyslog_pkidir}
 %{_initrddir}/rsyslog
 %{_sbindir}/rsyslogd
+%{_var}/spool/rsyslog
 %{_mandir}/*/*
 
 %files mysql

Comment 2 Tomas Heinrich 2012-03-20 17:42:59 UTC
Thanks for the report.
The actual directory that's going to be added is '/var/lib/rsyslog'.

Comment 3 Tuomo Soini 2012-03-20 18:14:51 UTC
Note: /var/spool/rsyslog is known by selinux policy. /var/lib/rsyslog is not!