We had this problem aswell at our site.

What seems to be happening is logrotate makes a new /var/log/messages file and changes the permissions on the file. What we did to fix this was:

1.   Make a new goup and add the hobbit/bb user to the grp.

2.   Edit /etc/logrotate.d/syslog and add/edit the following line

create 640 root "name of group"

Then hobbit/bb should be able to read the file.

Kveðja / With regards

Björgvin Þorgrímsson Kerfisstjóri Unix - Þjónusta fyrirtækjasviðs

Sími / Tel. +354 522 5000 Fax +354 522 5099

Ármúli 31 * 108 Reykjavík * Iceland * http://www.siminn.is <http://www.siminn.is/>

Síminn auðgar lífið

From: Josh Luthman [mailto:josh at imaginenetworksllc.com] Sent: 16. maí 2008 06:56 To: hobbit at hswn.dk Subject: Re: [hobbit] /var/log/messages permission denied

chgrp HOBBITUSER /var/log/messages chmod g+r /var/log/messages

Taken from: http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Administration_Gu...

On Fri, May 16, 2008 at 2:51 AM, Gavin Leonard <gleonard at progrexion.com> wrote:

When I look at my messages status on the Main BB page I only see this? Do I need to change the perms on the /var/log/messages folder?

No entries in /var/log/messages <http://misery.pgx.local/hobbit-cgi/bb-hostsvc.sh?CLIENT=pbx-01&SECTION=msgs:/var/log/messages>

Full log /var/log/messages <http://misery.pgx.local/hobbit-cgi/bb-hostsvc.sh?CLIENT=pbx-01&SECTION=msgs:/var/log/messages> Cannot open logfile /var/log/messages : Permission denied

Gavin Leonard

Director, Systems-Network Engineering

T

801-828-1735

F

801-828-1704

E

gleonard at progrexion.com <mailto:gleonard at progrexion.com>

Research | Marketing | Sales Generation

www.progrexion.com <http://www.progrexion.com/>

This email and its contents are confidential. If you are not the intended recipient, delete this email and do not use or disclose the information within this email or its attachments. Thank you.

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

I noticed on Centos 4 through 5.1 that the permissions on /var/log/messages do not hold after the logs are rotated.

I added the chmod and chgrp commands to the logrotate scripts.

Not sure if this happens on other versions....

Best,

PKrash

From: Josh Luthman [mailto:josh at imaginenetworksllc.com] Sent: Friday, May 16, 2008 1:56 AM To: hobbit at hswn.dk Subject: Re: [hobbit] /var/log/messages permission denied

chgrp HOBBITUSER /var/log/messages chmod g+r /var/log/messages

Taken from: http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Administratio n_Guide/Compiling_on_CentOS

On Fri, May 16, 2008 at 2:51 AM, Gavin Leonard <gleonard at progrexion.com> wrote:

When I look at my messages status on the Main BB page I only see

this? Do I need to change the perms on the /var/log/messages folder?

No entries in /var/log/messages

<http://misery.pgx.local/hobbit-cgi/bb-hostsvc.sh?CLIENT=pbx-01&SECTION= msgs:/var/log/messages> Full log /var/log/messages <http://misery.pgx.local/hobbit-cgi/bb-hostsvc.sh?CLIENT=pbx-01&SECTION= msgs:/var/log/messages> Cannot open logfile /var/log/messages : Permission denied

Gavin Leonard

Director, Systems-Network Engineering

T

801-828-1735

F

801-828-1704

E

gleonard at progrexion.com <mailto:gleonard at progrexion.com>

Research | Marketing | Sales Generation

www.progrexion.com <http://www.progrexion.com/>

This email and its contents are confidential. If you are not the intended recipient, delete this email and do not use or disclose the information within this email or its attachments. Thank you.

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

It would seem simplest just to drop a CREATE 640 root:hobbitgroup into /etc/logrotate.d/rsyslog or /etc/logrotate.d/syslog, depending on which syslogging daemon you use. This will handle the list of files at the top of that config file. Make sure you have the default include for logrotate.d in /etc/logrotate.conf.

On Fri, May 16, 2008 20:21, Josh Luthman wrote:

Can you give us all some details on how do to that?

On Fri, May 16, 2008 at 1:37 PM, Krash, Paul <pkrash at exegy.com> wrote:

...

I noticed on Centos 4 through 5.1 that the permissions on /var/log/messages do not hold after the logs are rotated.

I added the chmod and chgrp commands to the logrotate scripts.

Not sure if this happens on other versions....

Best,

PKrash

------------------------------ *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com] *Sent:* Friday, May 16, 2008 1:56 AM *To:* hobbit at hswn.dk *Subject:* Re: [hobbit] /var/log/messages permission denied

chgrp HOBBITUSER /var/log/messages chmod g+r /var/log/messages

Taken from: http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Administrati on_Guide/Compiling_on_CentOS

On Fri, May 16, 2008 at 2:51 AM, Gavin Leonard <gleonard at progrexion.com> wrote:

...

When I look at my messages status on the Main BB page I only see this? Do I need to change the perms on the /var/log/messages folder?

No entries in /var/log/messages <http://misery.pgx.local/hobbit-cgi/bb-hostsvc.sh?CLIENT=pbx-01&SECTI ON=msgs:/var/log/messages>

Full log /var/log/messages <http://misery.pgx.local/hobbit-cgi/bb-hostsvc.sh?CLIENT=pbx-01&SECTI ON=msgs:/var/log/messages>

Cannot open logfile /var/log/messages : Permission denied

*Gavin Leonard*

[image: cid:image001.gif at 01C856AD.922EF120]

Director, Systems-Network Engineering

*T*

801-828-1735

*F*

801-828-1704

*E*

gleonard at progrexion.com

Research | Marketing | Sales Generation

*www.progrexion.com* <http://www.progrexion.com/>

This email and its contents are confidential. If you are not the intended recipient, delete this email and do not use or disclose the information within this email or its attachments. Thank you.

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer ** This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

Mr. Luthman wrote:

Can you give us all some details on how do to that?

Sure! Here is the default script from Centos5.1 with the chmod command: #/etc/cron.daily/logrotate #!/bin/sh /usr/sbin/logrotate /etc/logrotate.conf EXITVALUE=$? if [ $EXITVALUE != 0 ]; then /usr/bin/logger -t logrotate "ALERT exited abnormally with [$EXITVALUE]" fi /bin/chmod 755 /var/log/messages exit 0

Notice that this makes /var/log/messages world readable. :-O

But I digress. :-)

Best,

PKrash, temporarily working off a Winserver, sorry for any Outlook mangling.

This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.