Since /dev/log is taken by the kernel, use /etc/.log for syslog unix socket