При загрузке машины кто-то зачем-то создал /etc/rsyslogd.pid с актуальным пидом rsyslog. Конфигурация самого rsyslog последний раз менялась много месяцев назад. ========================================================== root@thinkpad /etc #ls -lht |head total 1.6M -rw-r--r-- 1 root root 4 Jul 12 09:13 rsyslogd.pid -rw-r--r-- 1 root root 97K Jul 12 01:14 ld.so.cache drwxr-xr-x 7 root root 4.0K Jul 12 01:14 sysconfig drwxr-xr-x 4 root root 4.0K Jul 12 01:14 fonts drwxr-xr-x 2 root root 4.0K Jul 12 01:14 firsttime.d drwxr-xr-x 5 root root 4.0K Jul 10 21:42 cups drwxr-xr-x 2 root root 4.0K Jul 10 21:42 pam.d drwx------ 2 root root 4.0K Jul 10 21:42 xinetd.d drwxr-xr-x 5 root root 4.0K Jul 10 21:42 systemd [1] 12916 broken pipe ls --color=auto -lht | 12917 done head ========================================================== root@thinkpad /etc #uptime 10:56:48 up 1:43, 3 users, load average: 0.75, 0.44, 0.36 ========================================================== root@thinkpad /etc #sd_booted;echo $? 0 ========================================================== root@thinkpad /etc #systemctl|grep -i syslog rsyslog.service loaded active running System Logging Service syslog.socket loaded active running Syslog Socket ========================================================== root@thinkpad /etc #systemctl status rsyslog.service * rsyslog.service - System Logging Service Loaded: loaded (/lib/systemd/system/rsyslog.service; enabled) Active: active (running) since Sat 2014-07-12 09:13:23 KRAT; 1h 44min ago Process: 1015 ExecStartPost=/bin/touch /var/lock/subsys/rsyslogd (code=exited, status=0/SUCCESS) Process: 791 ExecStartPre=/lib/systemd/altlinux-rsyslog-extrasockets (code=exited, status=0/SUCCESS) Main PID: 885 (rsyslogd) CGroup: /system.slice/rsyslog.service `-885 /sbin/rsyslogd -n Jul 12 09:13:23 thinkpad.evg-krsk.dyndns.org systemd[1]: Started System Logging Service. ========================================================== root@thinkpad /etc #cat rsyslogd.pid 885 ========================================================== root@thinkpad /etc #rpm -qa rsyslog\* rsyslog-8.2.2-alt2 rsyslog-server-listen-0.1-alt2 ========================================================== root@thinkpad /etc #egrep -iv '^ *(#|$)' /etc/rsyslog.conf /etc/rsyslog.d/*.conf /etc/rsyslog.conf:$IncludeConfig /etc/rsyslog.d/*.conf /etc/rsyslog.conf:$IncludeConfig /etc/syslog.conf /etc/rsyslog.d/00_common.conf:module(load="imuxsock") # provides support for local system logging (e.g. via logger command) /etc/rsyslog.d/00_common.conf:module(load="imklog") # provides kernel logging support (previously done by rklogd) /etc/rsyslog.d/00_common.conf:$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat /etc/rsyslog.d/00_common.conf:$WorkDirectory /var/spool/rsyslog # where to place spool files /etc/rsyslog.d/00_extrasockets.conf:$ModLoad imuxsock /etc/rsyslog.d/00_extrasockets.conf:$AddUnixListenSocket /var/lib/openvpn/dev/log /etc/rsyslog.d/00_extrasockets.conf:$AddUnixListenSocket /var/spool/postfix/dev/log /etc/rsyslog.d/90_server.conf:$ModLoad immark # provides --MARK-- message capability /etc/rsyslog.d/90_server.conf:$ModLoad imudp # provides UDP syslog reception /etc/rsyslog.d/90_server.conf:$ModLoad imtcp # provides TCP syslog reception and GSS-API (if compiled to support it) /etc/rsyslog.d/90_server.conf:$UDPServerRun 514 /etc/rsyslog.d/90_server.conf:$InputTCPServerRun 514 /etc/rsyslog.d/99_local.conf::msg, contains, "next query" ~ /etc/rsyslog.d/99_local.conf::msg, contains, "now valid" ~ /etc/rsyslog.d/99_local.conf::msg, contains, "now invalid" ~ ========================================================== root@thinkpad /etc #rpm -V rsyslog rsyslog-server-listen .M....G. c /etc/rsyslog.d/00_extrasockets.conf ========================================================== root@thinkpad /etc #lsof /etc/rsyslogd.pid [1] 13568 exit 1 lsof /etc/rsyslogd.pid ==========================================================
Ага, пишут что в апстримном VCS должен быть фикс.
Seems fixed in 8.9.0-alt1
