Comment 3 for bug 759590

Revision history for this message
Gergely Nagy (algernon) wrote :

The kernel developers decided that one should use CAP_SYSLOG to access /proc/kmsg, instead of CAP_SYS_ADMIN (a good change, in itself), and that the kernel should warn once per process when a program tries to access it with the old capability.

The easy solution or workaround for Natty is to disable capability usage in syslog-ng: remove the comment from the #SYSLOGNG_OPTS="--no-caps" line in /etc/defaults/syslog-ng.

Newer versions of syslog-ng (3.3 and up) have support for CAP_SYSLOG. Versions prior to that will trigger the kernel warning unless compiled without capability support, or without disabling them on the command-line.