Sorry, there were two issues:
1) The condition that the fix was testing for (EBADF on read before dropping privileges) was not a reliable indicator of the underlying problem. I should really have tested for EPERM on read after dropping privileges.
2) I only applied the fix to imkmsg, it also needed to be applied to imklog.
Sorry, there were two issues:
1) The condition that the fix was testing for (EBADF on read before dropping privileges) was not a reliable indicator of the underlying problem. I should really have tested for EPERM on read after dropping privileges.
2) I only applied the fix to imkmsg, it also needed to be applied to imklog.
I've submitted an new pull request upstream: /github. com/rsyslog/ rsyslog/ pull/138
https:/