Move syslog-ng to root