Red Hat

From rsyslog wiki

RPM packages are currently being created by Peter Vrabec of Red Hat. There location is contained in the official package doc.

As of RHEL 5.2 Red Hat provides a rsyslog package. It has the proper selinux labeling rules :-

yum install rsyslog
# ls -alZ /sbin/rsyslogd 
-rwxr-xr-x  root root system_u:object_r:syslogd_exec_t /sbin/rsyslogd
# ls -alZ /sbin/rklogd 
-rwxr-xr-x  root root system_u:object_r:klogd_exec_t   /sbin/rklogd
# chkconfig syslog off
# chkconfig rsyslog on
# service syslog stop
# service rsyslog start

Pre RHEL5.2 doesn't currently include a selinux policy that knows about the rsyslog binaries, so when installing these packages on RHEL5, you'll also need to modify the selinux labeling rules to get the binaries installed with the right labels.

# rpm -Uvh rsyslog*rpm
# semanage fcontext -a -t syslogd_exec_t /sbin/rsyslogd
# semanage fcontext -a -t klogd_exec_t /sbin/rklogd
# restorecon /sbin/rsyslogd /sbin/rklogd
# /etc/init.d/rsyslog restart

Ref: http://tanso.net/rsyslog/

While not secifically rsyslog related, additional selinux changes are required if you would like to run rsyslog on a non-standard port. NB this additional configuration is not necessary under normal usage. In place of 'tcp 514', use the alternate protocol and port you wish to use.

# semanage port -l| grep syslog
# syslogd_port_t                 udp      514
# semanage port -a -t syslogd_port_t -p tcp 514