Logrotate Problems
Hi Y’all,
We have nginx set up and we are having problems with logrotate. The permissions and users do not seem to be any different from other machines that are working ok however the /var/log/nginx does have a directory in there that we are using to collect some special log stuff.
Could this subdirectory be interfering with the logrotate process?
ta
Andrew
[root@ ~]# logrotate -d /etc/logrotate.d/nginx
reading config file /etc/logrotate.d/nginx
Handling 1 logs
rotating pattern: /var/log/nginx/*log after 1 days (10 rotations)
empty log files are not rotated, old logs are removed
considering log /var/log/nginx/access.log
error: skipping “/var/log/nginx/access.log” because parent directory has insecure permissions (It’s world writable or writable by group which is not
“root”) Set “su” directive in config file to tell logrotate which user/group should be used for rotation.
considering log /var/log/nginx/error.log
error: skipping “/var/log/nginx/error.log” because parent directory has insecure permissions (It’s world writable or writable by group which is not
“root”) Set “su” directive in config file to tell logrotate which user/group should be used for rotation.
5 thoughts on - Logrotate Problems
Right there ^^^ it is telling you what is wrong and how to fix it.
Actually, doing what logrotate suggests causes other problems. We don’t have this problem on any other system so I am keen to understand the root of the issue rather than start messing around with the default permissions of the log directories.
logrotate only matches /var/log/nginx/*log – /var/log/nginx/access.log &
/var/log/nginx/error.log
Hmm, so it seems that logrotate might be broken for nginx on CentOS7. I
filed a bug with epel.
https://bugzilla.redhat.com/show_bug.cgi?id66105
It’s interesting in your world, where “broken” is “functions exactly as it is documented to work”
If you want it to match subdirectories then you should add to the logrotate, or add another one yourself for each subdirectory. It’s not hard, and it’s certainly not broken. It does what you tell it to do.
—
Jo Rhett Net Consonance : net philanthropy to improve open source and internet projects.
I don’t want it to match subdirectories. I just want it to rotate the standard, default, access and error logs which in this setup is not working correctly.
If you don’t have anything useful to add other than trolling then please keep it to yourself.
CentOS mailing list CentOS@CentOS.org https://lists.CentOS.org/mailman/listinfo/CentOS