Comment 57 for bug 459730

/dev/xconsole isn't created if it isn't there. If /dev/xconsole exists it is not taken to output logs as given in /etc/rsyslog.d/50-default.conf.

Creating /dev/xconsole and changing user:group doesn't help. service rsyslog restart doesn't have access to this pipe. It doesn't matter if apparmore is active or not. The reported error is in all cases the same:

Jun 13 15:25:59 nc158-muc rsyslogd-2039: Could no open output pipe '/dev/tty12': Permission denied [try http://www.rsyslog.com/e/2039 ]
Jun 13 15:25:59 nc158-muc rsyslogd-2039: Could no open output pipe '/dev/xconsole': No such file or directory [try http://www.rsyslog.com/e/2039 ]

# ls -la /dev/tty
crw--w---- 1 root tty 4, 12 Jun 13 15:18 /dev/tty12

/dev/xconsole is destroyed every reboot.

If xconsole is installed /dev/xconsole should be created and used by rsyslog. If /dev/tty12 is configured to printout all logs it should be used by rsyslog if at least groups match!

# grep syslog /etc/group
tty:x:5:syslog

# ps axu | grep syslog
syslog 5886 0.0 0.0 257916 1260 ? Ssl 15:25 0:00 rsyslogd