[CentOS] rsyslog for chrooted sftp users has stopped working -- Centos 6.6

Tue Sep 15 16:44:29 UTC 2015
Gordon Messmer <gordon.messmer at gmail.com>

On 09/14/2015 06:49 PM, Jeff Cours wrote:
> Unfortunately, the production server already has that setting, so it's back
> to eliminating differences.

Log in to one of the chroot accounts, and while that session is open, 
check all of that user's processes in /proc.  Specifically, I'd check 
/proc/<pid>/{root,cwd,fd}

Also check selinux enforcing on both hosts, and the SELinux attributes 
of the chroot dir, its dev directory and its log socket.