Comment 9 for bug 523610

Revision history for this message
Martin Pitt (pitti) wrote : Re: 20100218 EC2 image (ami-0512fe6c): Cannot read proc file system: 1 - Operation not permitted.

Regression from bug 517773, which was not completely implemented.

rsyslog needs to check if it can read from /proc/kmsg as non-root, and not drop privileges if not. In other works, seteuid(), read() -> on fail, seteuid(0) and keep it that way, on success -> setuid() -> permanently drop privs.