FS#42169 - [nginx] logrotate fails due to incorrect permissions

Attached to Project: Arch Linux
Opened by Kai Hendry (hendry) - Monday, 29 September 2014, 06:38 GMT
Last edited by Bartłomiej Piotrowski (Barthalion) - Monday, 13 October 2014, 06:56 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Sébastien Luttringer (seblu)
Bartłomiej Piotrowski (Barthalion)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

With `systemctl status -l logrotate.service` I noticed errors like:

logrotate[12812]: error: skipping "/var/log/nginx/foobar.access.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

I noticed in the PKGBUILD:

chown http:log "$pkgdir"/var/log/nginx

So logrotate expects su (IIUC), though the package uses http:log and has no "su" provision in /etc/logrotate.d/nginx

I added `su http log` to /etc/logrotate.d/nginx and things seem to work better after `sudo systemctl restart logrotate.service`

Additional info:
* 1.6.2-1
* using default


Steps to reproduce:
This task depends upon

Closed by  Bartłomiej Piotrowski (Barthalion)
Monday, 13 October 2014, 06:56 GMT
Reason for closing:  Fixed
Additional comments about closing:  nginx 1.6.2-2

Loading...