On 08/03/2013 23:24, Ondřej Surý wrote:
Anand,
thanks for reporting. I think the logfile needs to be created after
the pribiledges are dropped. Well include the fix into final 1.2.0.
Hi Ondrej,
If the log file is created after privileges are dropped, then the first
few log entries (such as binding to interface) would have nowhere to go.
So you should still consider changing the ownership just before dropping
privileges.
As a compromise, perhaps Knot could log those lines to syslog, and then
switch to the log file (similar to what BIND does on startup), but
that's kind of messy too, with log entries in different places.
Regards,
Anand