[syslog-ng] file permissions
Andrews, Glenn J (Glenn)
syslog-ng@lists.balabit.hu
Tue, 27 Jan 2004 13:09:41 -0500
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C3E500.6A3A81C4
Content-Type: text/plain;
charset="UTF-8"
Is there a way to set file permssions on the logs syslog-ng creates ?
It seems to create them with 600 root:root which makes them read/write by root only.
Can I set them to 644 ?
Glenn Andrews
N.E. Premise Operations
Data / Voice Networking Services
gjandrews@lucent.com <mailto:gjandrews@lucent.com> << mailto:gjandrews@lucent.com <mailto:gjandrews@lucent.com> >>
-----Original Message-----
From: Andrew Culver [mailto:aculver@uwo.ca]
Sent: Tuesday, January 27, 2004 12:45 PM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]syslog-ng do not work....
Maybe this is too simple but.. is that your entire config file? Do you not have destination and log directives?
----- Original Message -----
From: Alessandro Fiorenzi <mailto:a.fiorenzi@infogroup.it>
To: Syslog-ng <mailto:syslog-ng@lists.balabit.hu>
Sent: Tuesday, January 27, 2004 10:52 AM
Subject: [syslog-ng]syslog-ng do not work....
Hi, I have set this configuration on central logserver
options {
long_hostnames(off);
sync(0);
log_fifo_size(1000);
dnscache(yes);
use_fqdn(yes);
use_time_recvd(true);
};
source src {
internal();
file("/proc/kmsg" log_prefix("kernel: "));
tcp(ip(192.168.52.100) port(514) max-connections(1000));
udp(ip(0.0.0.0) port(514));
};
but it does not work. The fist errore is on dnscache(yes);, if i remove this I get the second on use_time_recvd(true);, remove this one I get errore on file("/proc/kmsg" log_prefix("kernel: ")); .... why?
Thanks
Fiorenzi A.
------------------------------------------------------------------------
INFOGROUP S.P.A http://www.infogroup.it
-------------------------------------------------------------------------
DR. FIORENZI ALESSANDRO
Consulente Tribunale Firenze - sicurezza informatica -
Security Administrator
Socio <file:///home/fiore/signature/www.clusit.it> CLUSIT, <file:///home/fiore/signature/www.alsi.it> ALSI
Tel : +39.055.43.65.742
CE : +39.335.64.144.77
@Email : a.fiorenzi@infogroup.it
PGP Key: http://www.infogroup.it/ds/fiorenzi.asc
-------------------------------------------------------------------------
"Faber est suae quisque fortunae"
-------------------------------------------------------------------------
------_=_NextPart_001_01C3E500.6A3A81C4
Content-Type: text/html;
charset="UTF-8"
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=399240718-27012004><FONT face=Arial color=#0000ff
size=2> Is there a way to set file permssions on the logs
syslog-ng creates ?</FONT></SPAN></DIV>
<DIV><SPAN class=399240718-27012004><FONT face=Arial color=#0000ff size=2>It
seems to create them with 600 root:root which makes them read/write by root
only.</FONT></SPAN></DIV>
<DIV><SPAN class=399240718-27012004><FONT face=Arial color=#0000ff
size=2>Can I set them to 644 ?</FONT></SPAN></DIV>
<DIV><SPAN class=399240718-27012004><FONT face="Comic Sans MS"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=399240718-27012004><FONT face="Comic Sans MS" size=2>Glenn
Andrews<BR>N.E. Premise Operations<BR>Data / Voice Networking Services<BR><A
href="mailto:gjandrews@lucent.com">gjandrews@lucent.com</A>
<<U></U></FONT><U><FONT face="Comic Sans MS" color=#0000ff size=2><<A
href="mailto:gjandrews@lucent.com">mailto:gjandrews@lucent.com</A>></FONT></U><FONT
face="Comic Sans MS" size=2>></FONT> </DIV></SPAN>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Andrew Culver
[mailto:aculver@uwo.ca]<BR><B>Sent:</B> Tuesday, January 27, 2004 12:45
PM<BR><B>To:</B> syslog-ng@lists.balabit.hu<BR><B>Subject:</B> Re:
[syslog-ng]syslog-ng do not work....<BR><BR></FONT></DIV>
<DIV><FONT size=2>Maybe this is too simple but.. is that your entire config
file? Do you not have destination and log directives?</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=a.fiorenzi@infogroup.it
href="mailto:a.fiorenzi@infogroup.it">Alessandro Fiorenzi</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=syslog-ng@lists.balabit.hu
href="mailto:syslog-ng@lists.balabit.hu">Syslog-ng</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, January 27, 2004 10:52
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [syslog-ng]syslog-ng do not
work....</DIV>
<DIV><BR></DIV>Hi, I have set this configuration on central
logserver<BR><BR>options {<BR>
long_hostnames(off);
<BR>
sync(0);
<BR>
log_fifo_size(1000);<BR>
dnscache(yes);<BR>
use_fqdn(yes);<BR>
use_time_recvd(true);<BR>
};<BR><BR>source src {<BR>
internal();<BR> file("/proc/kmsg"
log_prefix("kernel: "));<BR>
tcp(ip(192.168.52.100) port(514)
max-connections(1000));<BR>
udp(ip(0.0.0.0) port(514));<BR>
};<BR><BR>but it does not work. The fist errore is on dnscache(yes);, if i
remove this I get the second on use_time_recvd(true);, remove this one I get
errore on file("/proc/kmsg" log_prefix("kernel: ")); ....
why?<BR><BR>Thanks<BR><BR>Fiorenzi A.<BR><BR><BR>
<TABLE cellSpacing=0 cellPadding=0 width="100%">
<TBODY>
<TR>
<TD>
<TABLE cellSpacing=0 cellPadding=0 width="100%">
<TBODY>
<TR>
<TD><FONT
size=3><B>------------------------------------------------------------------------
<ADDRESS>INFOGROUP S.P.A
http://www.infogroup.it
</ADDRESS>-------------------------------------------------------------------------<BR>DR.
FIORENZI ALESSANDRO </B></FONT><BR><BR>Consulente Tribunale
Firenze - sicurezza informatica -<BR>Security Administrator
<BR>Socio <A
href="file:///home/fiore/signature/www.clusit.it"><U>CLUSIT</U></A>,
<A
href="file:///home/fiore/signature/www.alsi.it"><U>ALSI</U></A><BR><BR><BR><BR><BR>
<ADDRESS>Tel : +39.055.43.65.742 <BR>CE : +39.335.64.144.77
<BR>@Email : a.fiorenzi@infogroup.it <BR>PGP Key:
http://www.infogroup.it/ds/fiorenzi.asc</ADDRESS><FONT
size=3><I>-------------------------------------------------------------------------<BR>
<B>"Faber est suae quisque fortunae"
</B><BR>-------------------------------------------------------------------------</I></FONT>
</TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>
------_=_NextPart_001_01C3E500.6A3A81C4--