--- name: "closelog" section: "3" platform: "freebsd" package: "base" version: "16.0-CURRENT-20261027-61c70dc16a79" release: "FreeBSD 16.0-CURRENT (2026-10-27)" platforms: ["linux", "freebsd"] url: "https://new.carta.tech/closelog" --- # closelog(3) control system message log ## NAME **syslog**, **vsyslog**, **openlog**, **closelog**, **setlogmask** – control system message log ## LIBRARY Standard C Library (libc, -lc) ## SYNOPSIS **#include \** *void*\ **syslog**(*int priority*, *const char \*message*, *...*); *void*\ **openlog**(*const char \*ident*, *int logopt*, *int facility*); *void*\ **closelog**(*void*); *int*\ **setlogmask**(*int maskpri*); **#include \** **#include \** *void*\ **vsyslog**(*int priority*, *const char \*message*, *va\_list args*); ## DESCRIPTION The **syslog**() function writes *message* to the system message logger. The message is then written to the system console, log files, logged-in users, or forwarded to other machines as appropriate. (See [syslogd(8)](/syslogd/8.md).) The message is identical to a [printf(3)](/printf/3.md) format string, except that ‘%m’ is replaced by the current error message. (As denoted by the global variable *errno*; see [strerror(3)](/strerror/3.md).) A trailing newline is added if none is present. The **vsyslog**() function is an alternate form in which the arguments have already been captured using the variable-length argument facilities of [stdarg(3)](/stdarg/3.md). The message is tagged with *priority*. Priorities are encoded as a *facility* and a *level*. The facility describes the part of the system generating the message. The level is selected from the following *ordered* (high to low) list: - LOG\_EMERG A panic condition. This is normally broadcast to all users. - LOG\_ALERT A condition that should be corrected immediately, such as a corrupted system database. - LOG\_CRIT Critical conditions, e.g., hard device errors. - LOG\_ERR Errors. - LOG\_WARNING Warning messages. - LOG\_NOTICE Conditions that are not error conditions, but should possibly be handled specially. - LOG\_INFO Informational messages. - LOG\_DEBUG Messages that contain information normally of use only when debugging a program. The **openlog**() function provides for more specialized processing of the messages sent by **syslog**() and **vsyslog**(). The *ident* argument is a string that will be prepended to every message. It may be formatted as *ident\[N\]* in which case decimal number *N* replaces the process id within messages. The *logopt* argument is a bit field specifying logging options, which is formed by OR'ing one or more of the following values: - LOG\_CONS If **syslog**() cannot pass the message to [syslogd(8)](/syslogd/8.md) it will attempt to write the message to the console (“*/dev/console*”). - LOG\_NDELAY Open the connection to [syslogd(8)](/syslogd/8.md) immediately. Normally the open is delayed until the first message is logged. Useful for programs that need to manage the order in which file descriptors are allocated. - LOG\_PERROR Write the message to standard error output as well to the system log. - LOG\_PID Log the process id with each message: useful for identifying instantiations of daemons. On FreeBSD, this option is enabled by default and cannot be disabled. The *facility* argument encodes a default facility to be assigned to all messages that do not have an explicit facility encoded: - LOG\_AUTH The authorization system: [login(1)](/login/1.md), [su(1)](/su/1.md), [getty(8)](/getty/8.md), etc. - LOG\_AUTHPRIV The same as LOG\_AUTH, but logged to a file readable only by selected individuals. - LOG\_CONSOLE Messages written to */dev/console* by the kernel console output driver. - LOG\_CRON The cron daemon: [cron(8)](/cron/8.md). - LOG\_DAEMON System daemons, such as [routed(8)](/routed/8.md), that are not provided for explicitly by other facilities. - LOG\_FTP The file transfer protocol daemons: [ftpd(8)](/ftpd/8.md), [tftpd(8)](/tftpd/8.md). - LOG\_KERN Messages generated by the kernel. These cannot be generated by any user processes. - LOG\_LPR The line printer spooling system: [lpr(1)](/lpr/1.md), [lpc(8)](/lpc/8.md), [lpd(8)](/lpd/8.md), etc. - LOG\_MAIL The mail system. - LOG\_NEWS The network news system. - LOG\_NTP The network time protocol system. - LOG\_SECURITY Security subsystems, such as [ipfw(4)](/ipfw/4.md). - LOG\_SYSLOG Messages generated internally by [syslogd(8)](/syslogd/8.md). - LOG\_USER Messages generated by random user processes. This is the default facility identifier if none is specified. - LOG\_UUCP The uucp system. - LOG\_LOCAL0 Reserved for local use. Similarly for LOG\_LOCAL1 through LOG\_LOCAL7. The **closelog**() function can be used to close the log file. The **setlogmask**() function sets the log priority mask to *maskpri* and returns the previous mask. Calls to **syslog**() with a priority not set in *maskpri* are rejected. The mask for an individual priority *pri* is calculated by the macro **LOG\_MASK**(*pri*); the mask for all priorities up to and including *toppri* is given by the macro **LOG\_UPTO**(*toppri*);. The default allows all priorities to be logged. ## RETURN VALUES The routines **closelog**(), **openlog**(), **syslog**() and **vsyslog**() return no value. The routine **setlogmask**() always returns the previous log mask level. ## EXAMPLES ``` syslog(LOG_ALERT, "who: internal error 23"); openlog("ftpd", LOG_PID | LOG_NDELAY, LOG_FTP); setlogmask(LOG_UPTO(LOG_ERR)); syslog(LOG_INFO, "Connection from host %d", CallingHost); syslog(LOG_ERR|LOG_LOCAL2, "foobar error: %m"); ``` ## SEE ALSO [logger(1)](/logger/1.md), [syslogd(8)](/syslogd/8.md) ## HISTORY These functions appeared in 4.2BSD. ## BUGS Never pass a string with user-supplied data as a format without using ‘%s’. An attacker can put format specifiers in the string to mangle your stack, leading to a possible security hole. This holds true even if the string was built using a function like **snprintf**(), as the resulting string may still contain user-supplied conversion specifiers for later interpolation by **syslog**(). Always use the proper secure idiom: ``` syslog(priority, %s, string); ```