Hi all. First, I'm sorry: I'm afraid my english is very poor. :-| Actually we run a medium log server, with a dozen of host logging on it via tcp. syslog-ng is 1.4.15, OS is Linux RedHat 7.2. We find some trouble in file creation: we want syslog-ng create files with an user, a group and a bitmask, but it fail in bitmap setting for some files and do it successfuly for other files. This is a snap of our configuration file (I'm sorry for lines wrap):
--------------------------- START --------------------------------< # bayonne logfiles destination bayonne_all {file("/var/log/bayonne/bayonne.log" owner("root") group("bayonne") perm(0660)); };
destination bayonne_debug {file("/var/log/bayonne/debug.log" owner("root") group("bayonne") perm(0660)); }; destination bayonne_info {file("/var/log/bayonne/info.log" owner("root") group("bayonne") perm(0660)); }; destination bayonne_err {file("/var/log/bayonne/error.log" owner("root") group("bayonne") perm(0660)); }; destination bayonne_crit {file("/var/log/bayonne/critical.log" owner("root") group("bayonne") perm(0660)); }; # bayonne-avvenire logfiles destination avvenire_all {file("/var/log/bayonne/avvenire/avvenire.log" owner("root") group("bayonne") perm(0660)); }; destination avvenire_debug {file("/var/log/bayonne/avvenire/debug.log" owner("root") group("bayonne") perm(0660)); }; destination avvenire_info {file("/var/log/bayonne/avvenire/info.log" owner("root") group("bayonne") perm(0660)); }; destination avvenire_warn {file("/var/log/bayonne/avvenire/warning.log" owner("root") group("bayonne") perm(0660)); }; destination avvenire_err {file("/var/log/bayonne/avvenire/error.log" owner("root") group("bayonne") perm(0660)); };
--------------------------- END --------------------------------<
What we want is something like this:
--------------------------- START --------------------------------< [root@platone root]# ls -l /var/log/bayonne total 7552 drwxrwx--- 2 root bayonne 4096 Jun 11 17:58 avvenire -rw-rw---- 1 root bayonne 2860663 Jun 13 17:12 bayonne.log -rw-rw---- 1 root bayonne 23267 Jun 13 16:34 calls -rw-rw---- 1 root bayonne 0 Jun 13 04:02 critical.log -rw-rw---- 1 root bayonne 2541445 Jun 13 17:12 debug.log -rw-rw---- 1 root bayonne 6613 Jun 13 17:08 error.log -rw-rw---- 1 root bayonne 312605 Jun 13 17:12 info.log [root@platone root]# ls -l /var/log/bayonne/avvenire/ total 320 -rw-rw---- 1 root bayonne 126474 Jun 13 17:10 avvenire.log -rw-rw---- 1 root bayonne 75780 Jun 13 17:10 debug.log -rw-rw---- 1 root bayonne 1365 Jun 13 17:08 error.log -rw-rw---- 1 root bayonne 44628 Jun 13 17:10 info.log -rw-rw---- 1 root bayonne 4701 Jun 13 17:08 warning.log [root@platone root]# --------------------------- END --------------------------------<
In real world, this is the results:
--------------------------- START --------------------------------< [root@platone root]# ls -l /var/log/bayonne total 7552 drwx------ 2 root root 4096 Jun 11 17:58 avvenire -rw-rw---- 1 root bayonne 2860663 Jun 13 17:12 bayonne.log -rw-rw---- 1 root bayonne 23267 Jun 13 16:34 calls -rw-rw---- 1 root bayonne 0 Jun 13 04:02 critical.log -rw-rw---- 1 root bayonne 2541445 Jun 13 17:12 debug.log -rw-rw---- 1 root bayonne 6613 Jun 13 17:08 error.log -rw-rw---- 1 root bayonne 312605 Jun 13 17:12 info.log [root@platone root]# ls -l /var/log/bayonne/avvenire/ total 320 -rw-r----- 1 root bayonne 126474 Jun 13 17:10 avvenire.log -rw-r----- 1 root bayonne 75780 Jun 13 17:10 debug.log -rw-r----- 1 root bayonne 1365 Jun 13 17:08 error.log -rw-r----- 1 root bayonne 44628 Jun 13 17:10 info.log -rw-r----- 1 root bayonne 4701 Jun 13 17:08 warning.log [root@platone root]# --------------------------- END --------------------------------<
First, the directory /var/log/bayonne/avvenire/ is property of root.root with a bitmask drwx------ Second, all files in this directory are properties of root.bayonne and this is correct, but the bitmask is -rw-r----- and not -rw-rw---- All files in /var/log/bayonne/, pheraps, have corret owner and permission bitmask!!! If I perform a chown on directory /var/log/bayonne/avvenire/, it works, but if I perform a manual chmod on all files in this directory it *temporary* work, but permission are changhed at first a log line is appended in every file. Have someone out there experimented this behavoiur? -- Ciao da Villo - GPG public key available