[syslog-ng] file permissions

Andrews, Glenn J (Glenn) syslog-ng@lists.balabit.hu
Tue, 27 Jan 2004 13:09:41 -0500


This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C3E500.6A3A81C4
Content-Type: text/plain;
	charset="UTF-8"

    Is there a way to set file permssions on the logs syslog-ng creates ?
It seems to create them with 600 root:root which makes them read/write by root only.
Can I set them to 644 ?
 
Glenn Andrews
N.E. Premise Operations
Data / Voice Networking Services
gjandrews@lucent.com <mailto:gjandrews@lucent.com>  << mailto:gjandrews@lucent.com <mailto:gjandrews@lucent.com> >> 

-----Original Message-----
From: Andrew Culver [mailto:aculver@uwo.ca]
Sent: Tuesday, January 27, 2004 12:45 PM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]syslog-ng do not work....


Maybe this is too simple but.. is that your entire config file? Do you not have destination and log directives?

----- Original Message ----- 
From: Alessandro Fiorenzi <mailto:a.fiorenzi@infogroup.it>  
To: Syslog-ng <mailto:syslog-ng@lists.balabit.hu>  
Sent: Tuesday, January 27, 2004 10:52 AM
Subject: [syslog-ng]syslog-ng do not work....

Hi, I have set this configuration on central logserver

options {
        long_hostnames(off);     
        sync(0);     
        log_fifo_size(1000);
        dnscache(yes);
        use_fqdn(yes);
        use_time_recvd(true);
        };

source src {
        internal();
        file("/proc/kmsg" log_prefix("kernel: "));
        tcp(ip(192.168.52.100) port(514) max-connections(1000));
        udp(ip(0.0.0.0) port(514));
        };

but it does not work. The fist errore is on dnscache(yes);, if i remove this I get the second on use_time_recvd(true);, remove this one I get errore on file("/proc/kmsg" log_prefix("kernel: ")); .... why?

Thanks

Fiorenzi A.




------------------------------------------------------------------------ 

INFOGROUP S.P.A                 http://www.infogroup.it 
-------------------------------------------------------------------------
DR. FIORENZI ALESSANDRO 

Consulente Tribunale Firenze - sicurezza informatica -
Security Administrator 
Socio  <file:///home/fiore/signature/www.clusit.it> CLUSIT,  <file:///home/fiore/signature/www.alsi.it> ALSI





Tel : +39.055.43.65.742 
CE : +39.335.64.144.77 
@Email : a.fiorenzi@infogroup.it 
PGP Key: http://www.infogroup.it/ds/fiorenzi.asc
-------------------------------------------------------------------------
            "Faber est suae quisque fortunae" 
------------------------------------------------------------------------- 


------_=_NextPart_001_01C3E500.6A3A81C4
Content-Type: text/html;
	charset="UTF-8"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8">


<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=399240718-27012004><FONT face=Arial color=#0000ff 
size=2>&nbsp;&nbsp;&nbsp; Is there a way to set file permssions on the logs 
syslog-ng creates ?</FONT></SPAN></DIV>
<DIV><SPAN class=399240718-27012004><FONT face=Arial color=#0000ff size=2>It 
seems to create them with 600 root:root which makes them read/write by root 
only.</FONT></SPAN></DIV>
<DIV><SPAN class=399240718-27012004><FONT face=Arial color=#0000ff 
size=2>Can&nbsp;I set them to 644 ?</FONT></SPAN></DIV>
<DIV><SPAN class=399240718-27012004><FONT face="Comic Sans MS" 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=399240718-27012004><FONT face="Comic Sans MS" size=2>Glenn 
Andrews<BR>N.E. Premise Operations<BR>Data / Voice Networking Services<BR><A 
href="mailto:gjandrews@lucent.com">gjandrews@lucent.com</A> 
&lt;<U></U></FONT><U><FONT face="Comic Sans MS" color=#0000ff size=2>&lt;<A 
href="mailto:gjandrews@lucent.com">mailto:gjandrews@lucent.com</A>&gt;</FONT></U><FONT 
face="Comic Sans MS" size=2>&gt;</FONT> </DIV></SPAN>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
  <DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
  size=2>-----Original Message-----<BR><B>From:</B> Andrew Culver 
  [mailto:aculver@uwo.ca]<BR><B>Sent:</B> Tuesday, January 27, 2004 12:45 
  PM<BR><B>To:</B> syslog-ng@lists.balabit.hu<BR><B>Subject:</B> Re: 
  [syslog-ng]syslog-ng do not work....<BR><BR></FONT></DIV>
  <DIV><FONT size=2>Maybe this is too simple but.. is that your entire config 
  file? Do you not have destination and log directives?</FONT></DIV>
  <BLOCKQUOTE 
  style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
    <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
    <DIV 
    style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B> 
    <A title=a.fiorenzi@infogroup.it 
    href="mailto:a.fiorenzi@infogroup.it">Alessandro Fiorenzi</A> </DIV>
    <DIV style="FONT: 10pt arial"><B>To:</B> <A title=syslog-ng@lists.balabit.hu 
    href="mailto:syslog-ng@lists.balabit.hu">Syslog-ng</A> </DIV>
    <DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, January 27, 2004 10:52 
    AM</DIV>
    <DIV style="FONT: 10pt arial"><B>Subject:</B> [syslog-ng]syslog-ng do not 
    work....</DIV>
    <DIV><BR></DIV>Hi, I have set this configuration on central 
    logserver<BR><BR>options {<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    long_hostnames(off);&nbsp;&nbsp;&nbsp;&nbsp; 
    <BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    sync(0);&nbsp;&nbsp;&nbsp;&nbsp; 
    <BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    log_fifo_size(1000);<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    dnscache(yes);<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    use_fqdn(yes);<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    use_time_recvd(true);<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    };<BR><BR>source src {<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    internal();<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; file("/proc/kmsg" 
    log_prefix("kernel: "));<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    tcp(ip(192.168.52.100) port(514) 
    max-connections(1000));<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    udp(ip(0.0.0.0) port(514));<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    };<BR><BR>but it does not work. The fist errore is on dnscache(yes);, if i 
    remove this I get the second on use_time_recvd(true);, remove this one I get 
    errore on file("/proc/kmsg" log_prefix("kernel: ")); .... 
    why?<BR><BR>Thanks<BR><BR>Fiorenzi A.<BR><BR><BR>
    <TABLE cellSpacing=0 cellPadding=0 width="100%">
      <TBODY>
      <TR>
        <TD>
          <TABLE cellSpacing=0 cellPadding=0 width="100%">
            <TBODY>
            <TR>
              <TD><FONT 
                size=3><B>------------------------------------------------------------------------ 

                <ADDRESS>INFOGROUP S.P.A&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 
                &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp; 
                http://www.infogroup.it 
                </ADDRESS>-------------------------------------------------------------------------<BR>DR. 
                FIORENZI ALESSANDRO </B></FONT><BR><BR>Consulente Tribunale 
                Firenze - sicurezza informatica -<BR>Security Administrator 
                <BR>Socio <A 
                href="file:///home/fiore/signature/www.clusit.it"><U>CLUSIT</U></A>, 
                <A 
                href="file:///home/fiore/signature/www.alsi.it"><U>ALSI</U></A><BR><BR><BR><BR><BR>
                <ADDRESS>Tel : +39.055.43.65.742 <BR>CE : +39.335.64.144.77 
                <BR>@Email : a.fiorenzi@infogroup.it <BR>PGP Key: 
                http://www.infogroup.it/ds/fiorenzi.asc</ADDRESS><FONT 
                size=3><I>-------------------------------------------------------------------------<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
                <B>"Faber est suae quisque fortunae" 
                </B><BR>-------------------------------------------------------------------------</I></FONT> 
              </TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------_=_NextPart_001_01C3E500.6A3A81C4--