Looks good to me.

syslogd is probably not a binary we can random relink in the typical way
because it is started so early.

But I can take this chance to point out something.  Random relinking is
better if a program has more .o files.  Which would argue for splitting
code up into more .c files.  There obviously becomes a point where this
is silly, but doing small bits of this can be helpful.