[strongSwan] Can't get logging to work

Noel Kuntze noel at familie-kuntze.de
Wed Mar 4 17:14:54 CET 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Mark,

You probably have selinux enabled. The charon binary doesn't have the necessary privileges
to write to a file in /var/log.
You can either create a policy to allow it to do that specifically for your /var/log/strongswan/strongswan.log
file or set selinux to permissive mode: "setenforce permissive"

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 04.03.2015 um 05:42 schrieb Mark M:
> Hi,
>
> I am using the latest version of strongSwan with CentOS 7 and I cannot get the logging to work. My strongswan.conf is shown below. I see the logs in /var/log/secure and /var/log/messages but not the file I define.
>
>
> [root at CENTOS7 ~]# cat /etc/strongswan/strongswan.conf
> # strongswan.conf - strongSwan configuration file
> #
> # Refer to the strongswan.conf(5) manpage for details
> #
> # Configuration changes should be made in the included files
>
> charon {
>         load_modular = yes
>         plugins {
>                 include strongswan.d/charon/*.conf
>         }
>         filelog {
>                 /var/log/strongswan/strongswan.log {
>                 append = no
>                 default = 1
>                 flush_line = yes
>                 }
>         }
> }
>
>
> include strongswan.d/*.conf
>
>
>
> Any ideas as to why it won't work?
>
>
> Thank,
>
> Mark-
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=hd3N
-----END PGP SIGNATURE-----



More information about the Users mailing list