[syslog-ng] More on syslog-ng changing ownership and perms of source file

[alain.villefranque at orange.com]

Hi Bazsi,

I’m sorry, but I’m only a syslog-ng user and have no skill in development, so I cannot check the fix….

Regards

Alain



De : syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu] De la part de Scheidler, Balázs
Envoyé : jeudi 30 novembre 2017 00:42
À : Syslog-ng users' and developers' mailing list
Objet : Re: [syslog-ng] More on syslog-ng changing ownership and perms of source file

hi,
I've just posted a pull request that I didn't have time to test: can you pls test if this fixes the issue for you?

https://github.com/balabit/syslog-ng/pull/1782

--
Bazsi

On Wed, Nov 29, 2017 at 6:51 AM, <alain.villefranque at orange.com<mailto:alain.villefranque at orange.com>> wrote:
Hi Jim,

Thanks a lot for your quick answer,
It works fine in my situation,

Regards

Alain

-----Message d'origine-----
De : syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>] De la part de Jim Segrave
Envoyé : mercredi 29 novembre 2017 15:01
À : syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>
Objet : [syslog-ng] More on syslog-ng changing ownership and perms of source file

I added the line:

         | file_dir_perm_option

to the source_affile_option in ./modules/affile/affile-grammar.y:419 would allow setting ownership and permissions on source files (or opting for no-change)

This would gave:

source_affile_option
         : KW_FOLLOW_FREQ '(' LL_FLOAT ')'               { affile_sd_set_follow_freq(last_driver, (long) ($3 * 1000)); }
         | KW_FOLLOW_FREQ '(' LL_NUMBER ')'              { affile_sd_set_follow_freq(last_driver, ($3 * 1000)); }
         | KW_PAD_SIZE '(' LL_NUMBER ')'                 { ((AFFileSourceDriver *) last_driver)->pad_size = $3; }
         | file_dir_perm_option
         | multi_line_option
         | source_reader_option
         ;

I did this with the syslog-ng.3.6.4 source and it now does the following:

The owner group and permissions are changed only if the file source line specifies a value (not -1) for one of these items. In other words, it does not use any default value from the configuration, it simply leaves things as it found them.

--
Jim Segrave
jes at j-e-s.net<mailto:jes at j-e-s.net>

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20171130/a52713cc/attachment-0001.html>