Hello,
I can not speak to whether or not changing the permissions to rwxr-xr-x
without any adverse affects to the puppetserver process, but I think I
spotted a possible solution.

Does the file permissions show a period ( a dot . ) at the end of the
permissions list, like this?
# ls -l /etc/somefile
-rw-r-----. 1 root root 27 Jun  4 19:29 /etc/somefile

If so then your linux filesystem appears to support extended attributes and
Access Control Lists and you can set ACLs, on a per file or per directory
basis.
https://superuser.com/questions/230559/what-does-the-dot-mean-at-the-end-of-rw-r-r-how-do-you-set-it-with-chmod
https://wiki.archlinux.org/index.php/Access_Control_Lists

In this example I am giving a nonpriv user read access to a file that is
640 via the ACL:
[root@centos7 etc]# ls -l /etc/somefile
-rw-r-----. 1 root root 27 Jun  4 19:29 /etc/somefile
[root@centos7 etc]#
setfacl -m u:nonprivuser:r /etc/somefile
[root@centos7 etc]# getfacl somefile
# file: somefile
# owner: root
# group: root
user::rw-
user:nonprivuser:r--
group::r--
mask::r--
other::---

Regards,
James

On Tue, Jun 4, 2019 at 1:59 PM Peter Krawetzky <pkrawet...@gmail.com> wrote:

> I want to be able to ingest the puppet servers logs into splunk but the
> owner of the directory is puppet:puppet and the permissions are
> /var/log/puppetlabs/puppet rwxr-x---.  Since other has no access, the
> splunk service will not be able to read the log files.  Can I just change
> the permissions to rwxr-xr-x without any adverse affects to the
> puppetserver process?  Is there a way to do this in a puppetserver config
> file like logback.xml?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/puppet-users/0c69b316-a7ff-4417-84db-eb46f92882a4%40googlegroups.com
> <https://groups.google.com/d/msgid/puppet-users/0c69b316-a7ff-4417-84db-eb46f92882a4%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAOsPUchoq%2ByaThWEeL5%3DUwWDj7vd9WkEj2p8R1N0vhx9Q5bdCQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to