SYSLOG_ACTION_READ_ALL question