7.3. Collecting logs from chroot

To collect logs from a chroot using a syslog-ng client running on the host, complete the following steps:

Collecting logs from chroot

Figure 7.1. Collecting logs from chroot


Procedure 7.2. Collecting logs from chroot

  1. Create a /dev directory within the chroot. The applications running in the chroot send their log messages here.

  2. Create a local source in the configuration file of the syslog-ng application running outside the chroot. This source should point to the /dev/log file within the chroot (e.g., to the /chroot/dev/log directory).

  3. Include the source in a log statement.

[Note] Note

You need to set up timezone information within your chroot as well. This usually means creating a symlink to /etc/localtime.


© 2007-2008 BalaBit IT Security
Please send your comments or documentation bugs to: documentation@balabit.com