On Mon, 2 Feb 2015, Otis Gospodnetic wrote:

Hi,

Trying to tell the latest 8.7.0 rsyslog's imfile as follows, but it's
complaining about Permission denied.... which looks wrong...

module(load="imfile" mode="inotify" PollingInterval="10")

input(type="imfile"
     File="/mnt/opt/jetty/logs/jetty.stderrout.log"
     Tag="jetty:"
     ReadMode="0")

Feb  2 23:28:12 qqq-reports rsyslogd-2046: imfile warning: directory
'/mnt/opt/jetty/logs': Permission denied [try http://www.rsyslog.com/e/2046
]

ec2-user@qqq-reports ~]$ ls -al /mnt/opt/ | grep jetty
drwxr-xr-x. 12 root root 4096 Jan 31 13:48 jetty

[ec2-user@qqq-reports ~]$ ls -al /mnt/opt/jetty/ | grep logs
drwxr-xr-x.  2 root root  12288 Jan 31 22:14 logs

[ec2-user@qqq-reports ~]$ ls -al /mnt/opt/jetty/logs/jetty.log
-rw-r--r--. 1 root root 194510 Jan 31 22:18 /mnt/opt/jetty/logs/jetty.log

I don't see any info in /var/log/messages about rsyslog dropping privileges
when I restart it.
Plus, everything is readable and the parent directory has the +x for
everyone on it.

can you post your full config(s)? so that we can see if it says anything in there about dropping privileges

Also, you could be running into a SELinux or AppArmor (depending on your distro) permission, not just a traditional filesystem permission. What distro is this on?

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to