sesman populates syslog even with EnableSyslog=false

[dmityugov]

Hi,

I'm relatively new to xrdp. I was able to install xrdp 0.10.0-beta.2 and relevant stuff like xorgxrdp and xrdp-sesman on an Orange Pi 5 Plus machine with Arch Linux. Everything is working great but I have noticed a strange thing: when I disable output to SysLog with

EnableSyslog=false

in /etc/xrdp/sesman.ini, xrdp-sesman still populates the system journal (accessible via journalctl) with messages like these:

Mar 23 16:31:30 skuggabaldur xrdp-sesexec[641]: pam_unix(xrdp-sesman:session): session opened for user alarm(uid=1000) by alarm(uid=0)
Mar 23 16:31:30 skuggabaldur systemd-logind[511]: New session 3 of user alarm.
Mar 23 16:31:30 skuggabaldur systemd[1]: Started Session 3 of User alarm.
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: X.Org X Server 1.21.1.11
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: X Protocol Version 11, Revision 0
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: Current Operating System: Linux skuggabaldur 5.10.110-6-aarch64-rk3588-bsp5.10+ #1 SMP Sat Mar 9 00:30:26 UTC 2024 aarch64
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: Kernel command line: root=UUID=b3be9e2e-65ef-48c9-a434-9d8bed87d817 rw
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]:
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: Current version of pixman: 0.43.4
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]:         Before reporting problems, check http://wiki.x.org
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]:         to make sure that you have the latest version.
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: Markers: (--) probed, (**) from config file, (==) default setting,
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]:         (++) from command line, (!!) notice, (II) informational,
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]:         (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: (++) Log file: ".xorgxrdp.10.log", Time: Sat Mar 23 16:31:30 2024
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: (++) Using config file: "/etc/X11/xrdp/xorg.conf"
Mar 23 16:31:30 skuggabaldur xrdp-sesman[645]: (==) Using system config directory "/usr/share/X11/xorg.conf.d"
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: xorgxrdpSetup:
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: xrdpdevSetup:
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpmousePlug:
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpkeybPlug:
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpIdentify:
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpDriverFunc: op 10
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpProbe:
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpPreInit:
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpScreenInit: virtualX 800 virtualY 600 rgbBits 8 depth 24
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpScreenInit: pfbMemory bytes 1920000
Mar 23 16:31:31 skuggabaldur xrdp-sesman[645]: rdpScreenInit: pfbMemory 0x7fb48cb010

I understand that these messages differ from what sesman writes to /var/log/xrdp-sesman.log and that they look more like X Server startup messages, but is it possible to disable them somehow, or redirect to another file?

Thank you in advance

[matt335672]

Hi @dmityugov

These messages are output to the stdout of xrdp-sesman, which is why they appear in journalctl. They aren't going via the syslog mechanism.

There is no easy way to get rid of them without getting rid of all the output from xrdp-sesman.