Set bind capabilities to rsyslogd
This will allow for listening on privileged ports (i.e 514)
@@ -44,6 +44,8 @@ RUN mkdir -p /var/lib/nginx /etc/nginx/secrets /etc/nginx/stream-conf.d /var/cac
&& rm -f /etc/nginx/conf.d/* \
&& mkdir -p /var/lib/syslog \
&& touch /var/log/syslog \
+ && setcap 'cap_net_bind_service=+ep' /usr/sbin/rsyslogd \
+ && setcap -v 'cap_net_bind_service=+ep' /usr/sbin/rsyslogd \
&& chown -R nginx:0 /var/lib/syslog /var/log/syslog
RUN sed -i "/^http {/a log_format curiefenselog escape=none '$request_map';" /nginx.tmpl \
