mirror of
https://github.com/sheumann/hush.git
synced 2024-11-05 06:07:00 +00:00
29 lines
1.4 KiB
Plaintext
29 lines
1.4 KiB
Plaintext
|
If syslogd applet compiled with FEATURE_SYSLOGD_CFG=y, then it supports restricted syslog.conf.
|
||
|
|
The config resembles rsyslog.conf in RULES part:
|
||
|
|
|
||
|
|
LINE = DELIM [RULE | COMMENT]
|
||
|
|
COMMENT = #.*
|
||
|
|
DELIM = SPACE TAB
|
||
|
|
RULE = SELECTOR [;SELECTOR]* DELIM* ACTION DELIM*
|
||
|
|
SELECTOR = FACILITY [,FACILITY]* .[[!]=] PRIORITY
|
||
|
|
FACILITY = * | kern | user ... (see syslog.h)
|
||
|
|
PRIORITY = * | emerg | alert ... (see syslog.h)
|
||
|
|
ACTION = FILE
|
||
|
|
|
||
|
|
"mark" facility is NOT supported.
|
||
|
|
"none" priority is supported.
|
||
|
|
In FACILITY and PRIORITY "*" stands for "any".
|
||
|
|
FILE is a regular file or tty device.
|
||
|
|
|
||
|
|
Here is an example:
|
||
|
|
|
||
|
|
#syslog.conf
|
||
|
|
kern,user.* /var/log/messages #all messages of kern and user facilities
|
||
|
|
kern.!err /var/log/critical #all messages of kern facility with priorities lower than err (warn, notice ...)
|
||
|
|
*.*;auth,authpriv.none /var/log/noauth #all messages except ones with auth and authpriv facilities
|
||
|
|
kern,user.*;kern.!=notice;*.err;syslog.none /var/log/OMG #some whicked rule just as an example =)
|
||
|
|
*.* /dev/null #this prevents from logging to default log file (-O FILE or /var/log/messages)
|
||
|
|
|
||
|
|
Even in the case of match with some rule another rules will be tried too.
|
||
|
|
If there was no match with any of the rules, logging to default log file or shared memory will be performed.
|