Re: [log4perl-devel] log file permissions issues, pls advise

[Hugh E. <he...@re...>]

Mike Schilli:  

May I be so bold as to suggest the addition 
of this suggestion below in the perldoc?

Thank you Kevin.  That is exactly 
what I was looking for.  

-- Hugh

On Fri, 24 Feb 2006 09:39:09 -0800
Kevin Goess <cp...@go...> wrote:

> Hugh Esco wrote:
> > That reminder of the need for apache to be able to write to the log's parent directory 
> > got me moving again.  I put the log in /tmp and everything started working.  
> > 
> > And as a security precaution, I'm wondering if it is possible to move this log out of 
> > /tmp, without risking some other file system heirarchy to the risks of letting apache write to it?  
> > Any ideas on this one?  
> 
> I would not recommend writing log files to /tmp.  Here's the common
> solution:
> 
> - create a directory in /var/log/, for instance /var/log/escosapp/
> 
> 	$ mkdir /var/log/escosapp
> 
> - make it owned by the www-data user and only writeable by that user:
> 
> 	$ chown www-data /var/log/escosapp/
> 	$ chmod 0755 /var/log/escosapp/
> 
> The reason you can't write to /var/log/apache-ssl/ but apache can is
> that apache starts its logging process under the root user before it
> starts forking children and changing to the less-priviledged user.  Your
>  log4perl logs are written from the less-priviledged child processes
> running as the www-data user, so they can't write to the
> root-writeable-only apache log directory.
> 
> 
> -- 
> Happy Trails . . .
> 
> Kevin M. Goess
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> log4perl-devel mailing list
> log...@li...
> https://lists.sourceforge.net/lists/listinfo/log4perl-devel
> 
> 


-- 
--
Hugh Esco 
250-352-9361
he...@re...
RCK Computer Services 
http://reclaimedcomputers.ca/