Well, I went into SELinux and checked "Disable SELinux protection for syslogd daemon" and now it is starting up fine.
============================
Here's some more information I got after I posted the original message below:
When I boot into single user mode and /etc/init.d/syslog start,
it shows system logger and kernel logger starting OK. Then I see the following error message on the console:
audit(...): avc: denied {write} for pid=951 comm="minilogd" name="log" dev=tmpfs ino=6808 scontext=user_u:system_r:syslogd_t tcontext=user_u
bject_r:device_t tclass=sock_file
So it has something to do with SELinux?
=== START OF ORIGINAL MESSAGE ===
/var is being mounted rw. There are other processes writing to /var/log such as mysql writing to mysqld.log. For now I disabled syslog (chkconfig --del syslog) and just manually run syslogd -m 0 and klogd -2 (I boot into single user mode, start these two tasks, and then init 5 to go into runlevel 5).
I'm sure it's just a config problem as a result of my "playfulness." I just switched to Linux from Windows on my development box and couldn't resist messing with the system. The thing I remember doing that might have caused this problem is I moved /var and /usr to their own partitions. Here's the process I followed:
- boot into single user mode
- #mv /var /var.old
- #mkdir /var
- #mount -t ext3 /dev/sda11 /var
- #cp -a /var.old/* /var/
- boot into run level 5
I don't know if the problem happened right away because I walked away from my desk and when I came back about an hour later, the login window was waiting so I assumed everything went fine. I didn't notice any problem so I deleted /var.old. I also did the same with /usr which is now in its own partition in /dev/sda12.
I still don't know why I get permission denied. BTW, after manually starting syslogd and klogd from the terminal, logging seems to be fine -- I'm seeing messages in dmesg, messages, boot.log, cron, Xorg.0.log. The problem happens when logging is started via the syslog service. Well, I'll continue tracking this problem down and thank you again for helping me along.
If it helps, here's part of my /etc/fstab.
LABEL=/ / ext3 defaults 1 1
/dev/sda11 /var ext3 defaults 1 2
/dev/sda12 /usr ext3 defaults 1 2
LABEL=/boot /boot ext3 defaults 1 2
none /dev/pts devpts gid=5,mode=620 0 0
none /dev/shm tmpfs defaults 0 0
LABEL=/home /home ext3 defaults 1 2
LABEL=/opt /opt ext3 defaults 1 2
none /proc proc defaults 0 0
none /sys sysfs defaults 0 0
LABEL=SWAP-sda10 swap swap defaults 0 0
# then a VFAT mount which is the parition I use
# for transferring files between Linux and XP Pro
# also have several CIFS mounts to access shared drives
# on a Windows 2003 server