<DIV>From the chgrp man page in Solaris :</DIV>
<DIV> </DIV>
<DIV>To change the group ID of a file, the process must be the owner of the file and the new group ID must be the group of the process ID or must be in the supplementary group list of the process.</DIV>
<DIV> </DIV>
<DIV>So if the user has which the syslog-ng process is in the supplementary group to which</DIV>
<DIV>I want to change ownership of the file to, it should work.</DIV>
<DIV>It works in a shell.<BR><BR><B><I>catenate <infosec@gmail.com></I></B> wrote:</DIV>
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">On 10/26/05, <B class=gmail_sendername>Yan M.</B> <<A href="mailto:yannnick_m@yahoo.com">yannnick_m@yahoo.com</A>> wrote:
<DIV><SPAN class=gmail_quote></SPAN>
<BLOCKQUOTE class=gmail_quote style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<DIV>Hi,</DIV>
<DIV>in syslog-ng.conf man page it is said that the option group(gid); is used</DIV>
<DIV>to set group on created logfiles. Im trying to use that and it does not work</DIV>
<DIV>it is setting the group, not to the group I specify in that group() directive, but to </DIV>
<DIV>the group syslog-ng runs as.</DIV>
<DIV> </DIV>
<DIV>Also, the man page specifies you have to enter the gid in the group() option</DIV>
<DIV>but the syslog-ng daemon wont start when the gid is specified in its numeral form.</DIV>
<DIV>It should be group(groupname); instead of group(gid); in the man page.</DIV>
<DIV> </DIV>
<DIV>Does the chgrp works only when syslog-ng is running as root ? If so, it is not</DIV>
<DIV>a documented feature ..</DIV></BLOCKQUOTE>
<DIV><BR>I suppose it's not documented because it's a standard UNIX security measure to not allow non-root users to create files belonging to other users. This would allow users to get around quotas and do other nefarious things.<BR><BR>I do agree that if it's not in the docs, that this should be added. To work around it you'll need to either run syslog-ng as root and assign file ownership to another user (less desirable) or create it with explicit file permissions that allow the users/groups that you desire to see it (more desirable).<BR></DIV></DIV>_______________________________________________<BR>syslog-ng maillist - syslog-ng@lists.balabit.hu<BR>https://lists.balabit.hu/mailman/listinfo/syslog-ng<BR>Frequently asked questions at http://www.campin.net/syslog-ng/faq.html<BR><BR></BLOCKQUOTE><p>
<hr size=1> <a href="http://us.lrd.yahoo.com/_ylc=X3oDMTFqODRtdXQ4BF9TAzMyOTc1MDIEX3MDOTY2ODgxNjkEcG9zAzEEc2VjA21haWwtZm9vdGVyBHNsawNmYw--/SIG=110oav78o/**http%3a//farechase.yahoo.com/">Yahoo! FareChase - Search multiple travel sites in one click.</a>