Mikkel L. Ellertson wrote:
You should not be getting the error. You may want to run
"rpm -V syslogd" and see what errors it reports. You may also want to run a package like chkrootkit to make sure your box wasn't "hacked". A look at the log files is also in order. The /etc/syslog.conf file got changed, and maybe the /etc/rc.d/init.d/syslog file as well.
Mikkel
Mikkel, Thanks again for your suggestions. These are the results from your suggestion;
rpm -V sysklogd
.M.....T c /etc/rc.d/init.d/syslog S.5....T c /etc/sysconfig/syslog S.5....T c /etc/syslog.conf
Of course, there's no information in the help file to tell me what this means, but maybe someone else can decipher it for me.
chkrootkit came back without any errors at all. The log files didn't show anything about possible hacks to the files either.
Guess I'l keep looking for a reason for this behaviour. I changed the debug setting to emerg in syslog.conf, but I'm still getting an error. At least it's a different error number.
From "man rpm"
S file Size differs M Mode differs (includes permissions and file type) 5 MD5 sum differs D Device major/minor number mismatch L readLink(2) path mismatch U User ownership differs G Group ownership differs T mTime differs
I expected the differences in /etc/syslog.conf, but it may be worth taking a look at /etc/sysconfig/syslog. Because /etc/rc.d/init.d/syslog reads the contents of that file, that may be what is generating the error there. The file looks like it should.
One things I forgot to put in the last message - the changes you make in /etc/syslog.conf will not take affect untill you restart syslog. Normaly, I would run "service syslog restart" to do this. But you may have to fix what ever is wrong in /etc/sysconfig/syslog first. Or you can try renameing it to syslog.sav, and then restart syslog. The syslog script will work just fine without the /etc/sysconfig/syslog file - it check for the file, and if it isn't there, it uses some good default values in place of it.
Mikkel --
Do not meddle in the affairs of dragons, for you are crunchy and taste good with Ketchup!
____________________________________________________ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com ____________________________________________________
