G. Pape
socklog

Name

socklog-conf - sets up a socklog(8) service.

Synopsis

socklog-conf unix|inet|klog|ucspi-tcp acct logacct
socklog-conf notify acct grp

Description

socklog-conf creates /etc/socklog if necessary and a subdirectory that runs the unix, inet, ucspi-tcp or notify service (see below for each service). Except for the notify service, socklog-conf also creates a log directory with subdirectories.

acct, logacct and grp must not contain any special characters.

Unix Service

socklog-conf unix acct logacct

Running socklog-conf with the 1st argument unix, socklog-conf creates the service directory /etc/socklog/unix and the log directory /var/log/socklog.

socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to listen for syslog messages on /dev/log.

It also creates automatically rotated log directories in /var/log/socklog. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.

You can run the service under svscan(8) by creating a symbolic link in the service directory:

ln -s /etc/socklog/unix /service/socklog-unix

Inet Service

socklog-conf inet acct logacct

Running socklog-conf with the 1st argument inet, socklog-conf creates the service directory /etc/socklog/inet and the log directory /var/log/socklog-inet.

socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to listen for syslog messages on the UDP socket 0.0.0.0:514.

It also creates automatically rotated log directories in /var/log/socklog-inet. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.

You can run the service under svscan(8) by creating a symbolic link in the service directory:

ln -s /etc/socklog/inet /service/socklog-inet

Klog Service

socklog-conf klog acct logacct

Running socklog-conf with the 1st argument klog, socklog-conf creates the service directory /etc/socklog/klog and the log directory /var/log/socklog-klog.

socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to read kernel messages from /proc/kmsg on Linux, or /dev/klog on BSD.

It also creates automatically rotated log directories in /var/log/socklog-klog. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.

You can run the service under svscan(8) by creating a symbolic link in the service directory:

ln -s /etc/socklog/klog /service/socklog-klog

Ucspi-tcp Service

socklog-conf ucspi-tcp acct logacct

Running socklog-conf with the 1st argument ucspi-tcp, socklog-conf creates the service directory /etc/socklog/ucspi-tcp and the log directory /var/log/socklog-ucspi-tcp.

socklog-conf arranges for tcpserver(1) to run socklog(8) under the uid and gid of acct and to listen on the TCP socket 0.0.0.0:10116.

It also creates automatically rotated log directories in /var/log/socklog-ucspi-tcp. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.

You can run the service under svscan(8) by creating a symbolic link in the service directory:

ln -s /etc/socklog/ucspi-tcp /service/socklog-ucspi-tcp

Notify Service

socklog-conf notify acct grp

Running socklog-conf with the 1st argument notify, socklog-conf creates the service directory /etc/socklog/notify.

socklog-conf arranges for uncat(1) to run under the uid and gid of acct and to listen on the named pipe /var/log/socklog/.notify. The named pipe will have mode 0620, the uid of acct and the gid of grp.

All uids running a log service that is configured to push log events to the socklog-notify service must be member of the group grp.

You can run the service under svscan(8) by creating a symbolic link in the service directory:

ln -s /etc/socklog/notify /service/socklog-notify

See Also

socklog(8), multilog(8), tcpserver(1), tryto(1), uncat(1)

http://smarden.org/socklog/
http://cr.yp.to/daemontools.html

Author

Gerrit Pape <pape@smarden.org>


Table of Contents