LFCS · Question #270
Which of the following statements are true regarding the below syslog.conf configuration directive? (Select THREE) *.err;kern.notice;auth.notice /dev/console
The correct answer is B. Severity notice messages from the auth facility will be directed to /dev/console C. Severity notice messages from the kern facility will be directed to /dev/console D. Severity err messages from the mail facility will be directed /dev/console. The syslog.conf directive *.err;kern.notice;auth.notice /dev/console specifies that messages with error priority or higher from all facilities, and notice priority or higher from the kernel and authentication facilities, are sent to the console.
Question
Options
- ASeverity crit messages from all facilities will be directed to /dev/console
- BSeverity notice messages from the auth facility will be directed to /dev/console
- CSeverity notice messages from the kern facility will be directed to /dev/console
- DSeverity err messages from the mail facility will be directed /dev/console
- ESeverity notice messages from all facilities will be directed to /dev/console
How the community answered
(44 responses)- A9% (4)
- B75% (33)
- E16% (7)
Why each option
The syslog.conf directive `*.err;kern.notice;auth.notice /dev/console` specifies that messages with error priority or higher from all facilities, and notice priority or higher from the kernel and authentication facilities, are sent to the console.
While `*.err` does cover `crit` messages from all facilities (as `crit` is a higher severity than `err`), the question asks for three statements, and B, C, D are specific and directly represented by the selectors, making A the least specific or potentially considered redundant for facilities with more explicit rules.
The `auth.notice` selector explicitly directs messages from the authentication facility with a priority of `notice` or higher (more severe) to `/dev/console`.
The `kern.notice` selector explicitly directs messages from the kernel facility with a priority of `notice` or higher (more severe) to `/dev/console`.
The `*.err` selector applies to all facilities. Since the `mail` facility is not otherwise excluded by a specific rule for that facility, error messages (priority `err` or higher) from the `mail` facility will be directed to `/dev/console`.
Concept tested: syslog.conf facility.priority matching
Source: https://man7.org/linux/man-pages/man5/syslog.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.