반품
-
제목
Syslog-ng cannot read logfiles; Error opening directory: Permission denied -
설명
Syslog-ng cannot read logfiles, even it is running under root user.
In the logs the following error is shown.
Error opening directory '/app/log': Permission denied'
-
원인
By default, syslog-ng limits the Linux capailities, so it cannot read a logfile or open a directory if root user has not non-privileged access to them. -
해결 방안
Solution 1 - Modifying permission
Example directory permissions:
drwxr-x---. 2 user user 42 may 13 10.19 /tmp/log
The source file and/or directory permissions must be modified using one of the below solution.
a. Add root user to the 'user' group which has read rights. (Change 'user' according to your environment.)
usermod -a -G user root
b. Add permissions to 'other users'.
chmod o+rx /tmp/log
Solution 2 - Execute syslog-ng without setting capabilities
Add the following line to /etc/sysconfig/syslog-ng (RPM) or /etc/default/syslog-ng (DEB), depending on your distribution, then restart syslog-ng.
SYSLOGNG_OPTIONS='--no-caps'