<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body><div>Might be inheriting the umask of the parent process. Although you explicitly set it, I would take a poke at that.</div><div>How is syslog-ng being started? Can you unset it or set it to 0000 before starting syslog-ng as a test?</div><div>Jim</div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><div style="font-size:85%;color:#575757" dir="auto">Sent from my Verizon, Samsung Galaxy smartphone</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Declan White <declanw@is.bbc.co.uk> </div><div>Date: 2/9/18 12:01 PM (GMT-05:00) </div><div>To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> </div><div>Subject: Re: [syslog-ng] Umask funkiness </div><div><br></div></div>Already tried directory mode 04750 - no dice. It strips the g+s.<br><br>And dir-group ("group") when you aren't a member of that group probably won't fly.<br><br>I just need it to not touch stuff. It can only inherit these perms. It can't make them.<br><br>On Fri, Feb 09, 2018 at 04:48:01PM +0000, Robin Blanchard wrote:<br>> Why not explicitly manage the perms/ownerships with syslog-ng itself? Eg<br>> <br>> owner ("owner");<br>> group ("group");<br>> dir-owner ("owner");<br>> dir-group ("group");<br>> perm (0644);<br>> dir-perm (0755);<br>> <br>> -----Original Message-----<br>> From: syslog-ng [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Declan White<br>> Sent: Friday, February 9, 2018 10:39 AM<br>> To: syslog-ng@lists.balabit.hu<br>> Subject: [syslog-ng] Umask funkiness<br>> <br>> I have a directory owned by the syslog-ng user. Its group however belongs to a group of which the user is not a member.<br>> The directory is g+s, so that all files and dirs made within it inherit the group owner (and the g+s in the case of dirs).<br>> <br>> syslog-ng is running with a umask of 022 (interrogated running process to be sure). <br>> The file("/dir/${FOO}/${BAR}") destination driver has :<br>> create-dirs(yes) <br>> perm()<br>> dir-owner()<br>> dir-group()<br>> dir-perm()<br>> i.e. "don't change any perms"<br>> <br>> The aim of the game is to end up with files and dirs readable, but not writable, by the inherited group owner.<br>> I can't get it working. I am always ending up with <br>> drwx--S--- dirs and <br>> -rw------- files<br>> <br>> Solaris. syslog-ng-3.12.1<br>> <br>> -- <br>> Declan White<br>> ______________________________________________________________________________<br>> Member info: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7Crblanchard%40nephilaadvisors.com%7Cfb444356113d48ac735e08d56fdbaa70%7C514662bec8aa4f2284bdb5261f93c9eb%7C0%7C1%7C636537911611629716&sdata=DMBuLPhJAAJ70VVVk3Ni7qeicyri%2FG8j8VsrbNwqDSA%3D&reserved=0<br>> Documentation: https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=02%7C01%7Crblanchard%40nephilaadvisors.com%7Cfb444356113d48ac735e08d56fdbaa70%7C514662bec8aa4f2284bdb5261f93c9eb%7C0%7C1%7C636537911611629716&sdata=p%2FNfPPTDrJFTEuZpuSap8L7vvR7Pk%2BN7ilP58svtR94%3D&reserved=0<br>> FAQ: https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=02%7C01%7Crblanchard%40nephilaadvisors.com%7Cfb444356113d48ac735e08d56fdbaa70%7C514662bec8aa4f2284bdb5261f93c9eb%7C0%7C1%7C636537911611629716&sdata=tYkusXSejtf05DpuezwRX1i2KZeRG4Mb1bbkn0yqUbo%3D&reserved=0<br>> <br>> ______________________________________________________________________________<br>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng<br>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq<br>______________________________________________________________________________<br>Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng<br>FAQ: http://www.balabit.com/wiki/syslog-ng-faq<br><br></body></html>