Good morning all
I have centos obsidian installed
i also have imunify360 installed with ossec
im getting daily log rotate errors
/etc/cron.daily/logrotate:
error: stat of /var/ossec/logs/active-responses.log failed: Permission denied
error: stat of /var/ossec/logs/ossec.log failed: Permission denied
folder permissions are as follows
/var/ossec root ossec 550
/var/ossec/logs ossec ossec 770
/var/ossec/logs/active-response.log ossec ossec 664
/var/ossec/logs/ossec.log ossec ossec 664
This is the content of the file responsible for the rotation which is /etc/logrotate.d/ossec-hids
/var/ossec/logs/active-responses.log {
missingok
notifempty
create 0664 ossec ossec
su ossec ossec
}
/var/ossec/logs/ossec.log {
missingok
notifempty
create 0664 ossec ossec
su ossec ossec
}
if i change su ossec ossec to root root the rotation happens but i still receive the permission denied error every day via email
does anyone know why this is happening and how to solve this
I have centos obsidian installed
i also have imunify360 installed with ossec
im getting daily log rotate errors
/etc/cron.daily/logrotate:
error: stat of /var/ossec/logs/active-responses.log failed: Permission denied
error: stat of /var/ossec/logs/ossec.log failed: Permission denied
folder permissions are as follows
/var/ossec root ossec 550
/var/ossec/logs ossec ossec 770
/var/ossec/logs/active-response.log ossec ossec 664
/var/ossec/logs/ossec.log ossec ossec 664
This is the content of the file responsible for the rotation which is /etc/logrotate.d/ossec-hids
/var/ossec/logs/active-responses.log {
missingok
notifempty
create 0664 ossec ossec
su ossec ossec
}
/var/ossec/logs/ossec.log {
missingok
notifempty
create 0664 ossec ossec
su ossec ossec
}
if i change su ossec ossec to root root the rotation happens but i still receive the permission denied error every day via email
does anyone know why this is happening and how to solve this
Comment