Re: [webmin-l] VirtualMIn Problems

[Kris D. <kd...@vi...>]

Vernon Webb wrote:
> 
> > You're quick with core 3:)
> 
> Did it just come out? I had a need because Fedora Core 2 didn't have the
> drivers for NIC i havce. ;)
> 
> > What are the permissions of the error_log and the map logs?
> 
> Well the logs don't actually exist, the folders do and they have the
> same permissions as the user.

That would be part of the problem.  If you want logfiles owned by the
user, you MUST have them in a setgid directory, and IIRC there's another
bit that has to be set (don't know offhand).  You'll also have to have
the directory group-writable.

At the very least, you'll have to make sure your log rotation creates
new empty log files, and sets ownership and permissions.  With different
settings for each user/domain, this can get *very* ugly *very* quickly.

I've played with a number of ways to allow Apache logfiles to be owned
by another user, and I've yet to find a solution that meets all of my
wishlist criteria.  Currently, I just make logfiles owned by the Apache
user/group by default, mode 666;  and warn users that deleting a logfile
will Break Things.  It's not the greatest way to do things, but it's
about the simplest.  It also means that the logfiles don't contribute to
the user's disk quota.

> How do I figure that out?

Look for a line "User {something}" in your main Apache configuration
file.  Alternatively, ps should be able to tell you which user your
Apache processes (apache or httpd) are running as.

-kgd
-- 
Get your mouse off of there!  You don't know where that email has been!