25.5.2. Creating a New Directory for rsyslog Log Files

Procedure 25.4. Creating a New Working Directory

1. If required to use a different directory to store working files, create a directory as follows:

   ~]# mkdir /rsyslog

   Copy to Clipboard Toggle word wrap
2. Install utilities to manage SELinux policy:

   ~]# yum install policycoreutils-python

   Copy to Clipboard Toggle word wrap
3. Set the SELinux directory context type to be the same as the /var/lib/rsyslog/ directory:

   ~]# semanage fcontext -a -t syslogd_var_lib_t /rsyslog

   Copy to Clipboard Toggle word wrap
4. Apply the SELinux context:

   ~]# restorecon -R -v /rsyslog
   restorecon reset /rsyslog context unconfined_u:object_r:default_t:s0->unconfined_u:object_r:syslogd_var_lib_t:s0

   Copy to Clipboard Toggle word wrap
5. If required, check the SELinux context as follows:

   ~]# ls -Zd /rsyslog
   drwxr-xr-x. root root system_u:object_r:syslogd_var_lib_t:s0   /rsyslog

   Copy to Clipboard Toggle word wrap
6. Create subdirectories as required. For example:

   ~]# mkdir /rsyslog/work

   Copy to Clipboard Toggle word wrap

   The subdirectories will be created with the same SELinux context as the parent directory.
7. Add the following line in /etc/rsyslog.conf immediately before it is required to take effect:

   $WorkDirectory /rsyslog/work

   Copy to Clipboard Toggle word wrap

   This setting will remain in effect until the next WorkDirectory directive is encountered while parsing the configuration files.