Hi, As the title suggests, rsyslog-7.4.2 doesn't seem to be honouring defaults for the umask, dirgroup, filegroup, dircreatemode & filecreatemode options. It does honour these options when they are used within an action, but I don't want to have to specify them for every action. I've tried defining them prior to including any other config files, both inside & outside the "remote" ruleset (see below). I've also tried specifying these as options to module(type="builtin:omfile" ...), but this breaks my configuration.
I've run the whole thing in debug mode & I see the following ; 3701.046633592:7f39135f8740: remote: queue finished initialization 3701.046654134:7f39135f8740: cnf:global:cfsysline: $umask 0027 3701.046669631:7f39135f8740: cnf:global:cfsysline: $FileCreateMode 0640 3701.046682473:7f39135f8740: cnf:global:cfsysline: $FileGroup logaudit 3701.052690160:7f39135f8740: gid 10039 obtained for group 'logaudit' 3701.052720258:7f39135f8740: cnf:global:cfsysline: $DirCreateMode 0755 3701.052736657:7f39135f8740: cnf:global:cfsysline: $DirGroup logaudit 3701.053210378:7f39135f8740: gid 10039 obtained for group 'logaudit' ... 3701.075155891:7f39135f8740: dirowner: (unset) 3701.075176079:7f39135f8740: dirgroup: (unset) 3701.075195853:7f39135f8740: fileowner: (unset) 3701.075215766:7f39135f8740: filegroup: (unset) 3701.075235563:7f39135f8740: dircreatemode: (unset) 3701.075255409:7f39135f8740: filecreatemode: (unset) Does anyone have any suggestions as to why this might happening? I have this stanza at the top of my rsyslog.conf ; #### MODULES #### # Provide support for local system logging (e.g. via logger command) $ModLoad imuxsock # Provide kernel logging support (previously done by rklogd) $ModLoad imklog # Provides --MARK-- message capability $ModLoad immark #### GLOBAL DIRECTIVES #### ## Include all config files in /etc/rsyslog.d/ $IncludeConfig /etc/rsyslog.d/*.conf ## Revert to default ruleset for remaining rules $Ruleset RSYSLOG_DefaultRuleset In /etc/rsyslog.d/, I have 00-global.conf ; ## Set some sane defaults $DropTrailingLFOnReception on ## Create new "remote" ruleset. All directives following belong to this. $RuleSet remote $RulesetCreateMainQueue on $umask 0027 $FileCreateMode 0640 $FileGroup logaudit $DirCreateMode 0755 $DirGroup logaudit ## Include all rules into the current rulset $IncludeConfig /etc/rsyslog.d/rules.d/*.rs ## Finally, restore default ruleset $Ruleset RSYSLOG_DefaultRuleset Thanks, Grant _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
