View Issue Details

IDProjectCategoryView StatusLast Update
0006733Rocky-Linux-9rsyslogpublic2024-05-16 09:51
ReporterKrzysztof Krzyżaniak Assigned To 
PrioritynormalSeveritymajorReproducibilityrandom
Status newResolutionopen 
Summary0006733: rsyslogd 8.2310.0-4.el9 throws imjournal: open() failed for path: '/var/lib/rsyslog/imjournal.state.tmp': Operation not permitte
DescriptionNote this issue was also reported in Github https://github.com/rsyslog/rsyslog/issues/5375

Fresh installation of OS image on Google Cloud using Google Rocky9 image updated to the latest version.

# systemctl status rsyslog
● rsyslog.service - System Logging Service
     Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled; preset: enabled)
     Active: active (running) since Wed 2024-05-15 09:53:55 PDT; 16h ago
       Docs: man:rsyslogd(8)
             https://www.rsyslog.com/doc/
   Main PID: 786427 (rsyslogd)
      Tasks: 4 (limit: 35923)
     Memory: 202.0M
        CPU: 28.585s
     CGroup: /system.slice/rsyslog.service
             └─786427 /usr/sbin/rsyslogd -n

May 16 02:45:01 sjc-gcp-gateway01 rsyslogd[786427]: imjournal: open() failed for path: '/var/lib/rsyslog/imjournal.state.tmp': Operation not permitted [v8.2310.0-4.el9 try https://www.rsyslog.com/e/2433 ]
May 16 02:45:01 sjc-gcp-gateway01 rsyslogd[786427]: imjournal: open() failed for path: '/var/lib/rsyslog/imjournal.state.tmp': Operation not permitted [v8.2310.0-4.el9 try https://www.rsyslog.com/e/2433 ]
[..]

In effect /var/log/email is empty because rsyslog can't read events from systems journal.
Steps To ReproduceJust install latest version of Rocky9 linux with rsyslog:

rpm -qa|grep rsyslog
rsyslog-8.2310.0-4.el9.x86_64
rsyslog-logrotate-8.2310.0-4.el9.x86_64
rsyslog-relp-8.2310.0-4.el9.x86_64
rsyslog-gnutls-8.2310.0-4.el9.x86_64

Default configuration for rsyslog, nothing was changed.
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2024-05-16 09:51 Krzysztof Krzyżaniak New Issue