[SOLVED] Blank dnscrypt syslog in top-level root directory?

RickDeckard · n00b Joined: 08 Apr 2014 Posts: 7

I've had a whole bunch of updates to do to a system that's still running 4.3.3-hardened-r4 today, probably a few months worth, and RBAC is always enabled on the machine. DNSCrypt usually writes to /var/log/messages but this time it wrote a blank syslog file owned by dnscrypt:dnscrypt to /. I'm only running DNSCrypt with --ephemeral-keys and --loglevel options as part of an Unbound resolver setup.

Call me crazy, but shouldn't the syslog always contain information? Why isn't it writing to messages? Is there any place I can look to double check and correct this, besides setting --logfile= in /etc/conf.d/dnscrypt-proxy? And could an update to DNSCrypt have caused this?

I'm not noticing any out of place GRSec entries in the logs. What can I do to figure this out?
_________________
The nine most dangerous words in the English language are "I'm from the government, and I'm here to help."

khayyam

RickDeckard · n00b Joined: 08 Apr 2014 Posts: 7

I found the DNSCrypt initscript was forcing the syslog write all of a sudden.

So I added DNSCRYPT_LOGFILE=/var/log/messages to the conffile, took out "--logfile=", and now I'm not getting any more "mutually exclusive" warnings or top-level syslog writes.

But DNSCrypt is still refusing to work altogether which has basically brought down my entire internet. A quick look at the emerge.log file showed it wasn't upgraded as part of the big 4hr-long upgrade so there should never have been any syslog issues in the first place.
_________________
The nine most dangerous words in the English language are "I'm from the government, and I'm here to help."

khayyam · Posted: Fri Jun 17, 2016 5:47 pm Post subject:

RickDeckard · n00b Joined: 08 Apr 2014 Posts: 7

Oh! OK, I'll try that. I was under the impression it was safe to write to /var/log/messages because all the DNSCrypt information had gone there before the update.
_________________
The nine most dangerous words in the English language are "I'm from the government, and I'm here to help."

khayyam · Posted: Fri Jun 17, 2016 7:20 pm Post subject:

RickDeckard · n00b Joined: 08 Apr 2014 Posts: 7

It worked! DNSCRYPT_LOGFILE now points to /var/log/dnscrypt/dnscrypt and works if I invoke dnscrypt separately from its initscript with "--user=dnscrypt -d -E -R dnscrypt.org-fr" ... unbound as well as itself still remain crashed in rc-status tho.

I'll poke around some more to see if I can fix that. As the original issue stands, however, it's solved.

Thank you for your help.
_________________
The nine most dangerous words in the English language are "I'm from the government, and I'm here to help."

khayyam · Posted: Fri Jun 17, 2016 10:30 pm Post subject: