I just configured a privilege-separated RSyslog instance, and it's running fine. To read the kernel message log, I'm running a second daemon instance as root, along the lines described in the wiki.
Currently, my root instance forwards messages via UDP to unprivileged instance's localhost-only listener. It works, but I'm not entirely happy with it. I'd like to forward via a local UNIX domain socket, instead. I think I understand how to configure the 'imuxsock' module so my unprivileged instance reads from a non-standard socket location. But I can't figure out how to tell my root instance to forward via a local domain socket. Is this possible? If so, how? Ryan B. Lynch [email protected] _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

