My Oracle Support Banner

Oracle Linux: SELinux Is Preventing rsyslogd From Reading /etc/rsyslog.conf (Doc ID 2776049.1)

Last updated on MAY 16, 2021

Applies to:

Linux OS - Version Oracle Linux 7.0 and later
Linux x86-64

Symptoms

SELinux is enabled and preventing the rsyslogd from reading the /etc/rsyslog.conf file, it is also preventing the writing of any messages to the /var/log/messages file.

Check the status of the rsyslog service with the following command (Note the "could not open config file '/etc/rsyslog.conf': Permission denied" message):
# systemctl status -l rsyslog

 rsyslog.service - System Logging Service
  Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled)
  Active: active (running) since Wed 2021-02-17 11:22:21 HKT; 4h 7min ago
    Docs: man:rsyslogd(8)
          http://www.rsyslog.com/doc/
Main PID: 20541 (rsyslogd)
   Tasks: 1
  CGroup: /system.slice/rsyslog.service
          `-20541 /usr/sbin/rsyslogd -n

Feb 17 11:22:21 hostname systemd[1]: Starting System Logging Service...
Feb 17 11:22:21 hostname rsyslogd[20541]:  [origin software="rsyslogd" swVersion="8.24.0-57.el7_9" x-pid="20541" x-info="http://www.rsyslog.com"] start
Feb 17 11:22:21 hostname rsyslogd[20541]: could not open config file '/etc/rsyslog.conf': Permission denied [v8.24.0-57.el7_9 try http://www.rsyslog.com/e/2104 ] 
Feb 17 11:22:21 hostname systemd[1]: Started System Logging Service.

Changes

No Changes

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.