Bug#869679: [Pkg-nagios-devel] Bug#869679: icinga: /var/log/icinga/* not readable by www-data, preventing history viewing from web frontend
Hi Bas, yes, that seems to be the case. When I manually change the mode to 644, it keeps that. Maybe it's worth documenting this somewhere... I think we can consider this bug closed. Thanks for the hint, Christian On 26.07.2017 15:52, Bas Couwenberg wrote: > Control: tags -1 moreinfo > > Hi Christian, > > On 2017-07-25 17:09, root wrote: >> in the version of icinga in stretch, the icinca log files are created >> with permissions 600, >> user and group nagios:nagios or nagios:adm. This prevents the web >> frontend (which is run as >> www-data in case of apache2) from accessing it and displaying history >> for a service: >> >> "Log file "/var/log/icinga/icinga.log" invalid! No timestamp found >> within first 16 bytes! >> >> I have found not way of fixing this via additional group memberships. >> This was not the case >> in nagios as distributed with the previous release. > > I have several stretch systems (upgraded from jessie and earlier) > running icinga, and they don't have this issue. > > On all those systems /var/log/icinga is owned by nagios:nagios with mode > 644. > > In a clean stretch chroot the log file is indeed created with mod 600, > but you should be able to change this with: > > chmod 644 /var/log/icinga.log > > This should be sufficient to let the webserver access the file. > > The logrotation performed by Icinga reuses the ownership and permissions > of the existing logfile, so you should only need to do this once. > > Does this resolve your issue? > > Kind Regards, > > Bas
Bug#869679: [Pkg-nagios-devel] Bug#869679: icinga: /var/log/icinga/* not readable by www-data, preventing history viewing from web frontend
Control: tags -1 moreinfo Hi Christian, On 2017-07-25 17:09, root wrote: in the version of icinga in stretch, the icinca log files are created with permissions 600, user and group nagios:nagios or nagios:adm. This prevents the web frontend (which is run as www-data in case of apache2) from accessing it and displaying history for a service: "Log file "/var/log/icinga/icinga.log" invalid! No timestamp found within first 16 bytes! I have found not way of fixing this via additional group memberships. This was not the case in nagios as distributed with the previous release. I have several stretch systems (upgraded from jessie and earlier) running icinga, and they don't have this issue. On all those systems /var/log/icinga is owned by nagios:nagios with mode 644. In a clean stretch chroot the log file is indeed created with mod 600, but you should be able to change this with: chmod 644 /var/log/icinga.log This should be sufficient to let the webserver access the file. The logrotation performed by Icinga reuses the ownership and permissions of the existing logfile, so you should only need to do this once. Does this resolve your issue? Kind Regards, Bas
Bug#869679: icinga: /var/log/icinga/* not readable by www-data, preventing history viewing from web frontend
Package: icinga Version: 1.13.4-2 Severity: normal Dear Maintainer, in the version of icinga in stretch, the icinca log files are created with permissions 600, user and group nagios:nagios or nagios:adm. This prevents the web frontend (which is run as www-data in case of apache2) from accessing it and displaying history for a service: "Log file "/var/log/icinga/icinga.log" invalid! No timestamp found within first 16 bytes! I have found not way of fixing this via additional group memberships. This was not the case in nagios as distributed with the previous release. Thanks for looking into this, Christian -- System Information: Debian Release: 9.1 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages icinga depends on: ii icinga-cgi 1.13.4-2 ii icinga-core 1.13.4-2 Versions of packages icinga recommends: ii icinga-doc 1.13.4-2 Versions of packages icinga suggests: ii nagios-nrpe-plugin 3.0.1-3+deb9u1 -- no debconf information
