On Wed, Aug 06, 2014 at 04:50:41PM +0000, Tony Mountifield wrote: > > Probably rsyslog is being started before /var/log is mounted, and so it > is opening files within /var/log on the root device. rsyslog should start after local mounts are finished. I suspect it's selinux; /var/log should have a "var_log_t" context and I suspect it doesn't. John -- The most valuable thing you can make is a mistake - you can't learn anything from being perfect. -- Adam Osborne (1939-2003), American entrepreneur -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20140806/fa2a807a/attachment-0005.sig>