| Denys Vlasenko | 0288b27 | 2011-04-16 20:15:14 +0200 | [diff] [blame] | 1 | If syslogd applet compiled with FEATURE_SYSLOGD_CFG=y, then it supports restricted syslog.conf. |
| 2 | The config resembles rsyslog.conf in RULES part: |
| 3 | |
| 4 | LINE = DELIM [RULE | COMMENT] |
| 5 | COMMENT = #.* |
| 6 | DELIM = SPACE TAB |
| 7 | RULE = SELECTOR [;SELECTOR]* DELIM* ACTION DELIM* |
| 8 | SELECTOR = FACILITY [,FACILITY]* .[[!]=] PRIORITY |
| 9 | FACILITY = * | kern | user ... (see syslog.h) |
| 10 | PRIORITY = * | emerg | alert ... (see syslog.h) |
| 11 | ACTION = FILE |
| 12 | |
| 13 | "mark" facility is NOT supported. |
| 14 | "none" priority is supported. |
| 15 | In FACILITY and PRIORITY "*" stands for "any". |
| 16 | FILE is a regular file or tty device. |
| 17 | |
| 18 | Here is an example: |
| 19 | |
| 20 | #syslog.conf |
| 21 | kern,user.* /var/log/messages #all messages of kern and user facilities |
| 22 | kern.!err /var/log/critical #all messages of kern facility with priorities lower than err (warn, notice ...) |
| 23 | *.*;auth,authpriv.none /var/log/noauth #all messages except ones with auth and authpriv facilities |
| 24 | kern,user.*;kern.!=notice;*.err;syslog.none /var/log/OMG #some whicked rule just as an example =) |
| 25 | *.* /dev/null #this prevents from logging to default log file (-O FILE or /var/log/messages) |
| 26 | |
| 27 | Even in the case of match with some rule another rules will be tried too. |
| 28 | If there was no match with any of the rules, logging to default log file or shared memory will be performed. |