Re: [log4perl-devel] log file permissions issues, pls advise

[Mike S. <m...@pe...>]

On Sun, 26 Feb 2006, Hugh Esco wrote:

> Mike Schilli:
> May I be so bold as to suggest the addition
> of this suggestion below in the perldoc?

You could be even bolder and write up a FAQ, which could then be
included in Log4perl's FAQ page!

-- Mike

Mike Schilli
m...@pe...

>
> Thank you Kevin.  That is exactly
> what I was looking for.
>
> -- Hugh
>
> On Fri, 24 Feb 2006 09:39:09 -0800
> Kevin Goess <cp...@go...> wrote:
>
> > Hugh Esco wrote:
> > > That reminder of the need for apache to be able to write to the log's parent directory
> > > got me moving again.  I put the log in /tmp and everything started working.
> > >
> > > And as a security precaution, I'm wondering if it is possible to move this log out of
> > > /tmp, without risking some other file system heirarchy to the risks of letting apache write to it?
> > > Any ideas on this one?
> >
> > I would not recommend writing log files to /tmp.  Here's the common
> > solution:
> >
> > - create a directory in /var/log/, for instance /var/log/escosapp/
> >
> >     $ mkdir /var/log/escosapp
> >
> > - make it owned by the www-data user and only writeable by that user:
> >
> >     $ chown www-data /var/log/escosapp/
> >     $ chmod 0755 /var/log/escosapp/
> >
> > The reason you can't write to /var/log/apache-ssl/ but apache can is
> > that apache starts its logging process under the root user before it
> > starts forking children and changing to the less-priviledged user.  Your
> >  log4perl logs are written from the less-priviledged child processes
> > running as the www-data user, so they can't write to the
> > root-writeable-only apache log directory.
> >
> >
> > --
> > Happy Trails . . .
> >
> > Kevin M. Goess
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> > that extends applications into web and mobile media. Attend the live webcast
> > and join the prime developer group breaking into this new coding territory!
> > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> > _______________________________________________
> > log4perl-devel mailing list
> > log...@li...
> > https://lists.sourceforge.net/lists/listinfo/log4perl-devel
> >
> >
>
>
> --
> --
> Hugh Esco
> 250-352-9361
> he...@re...
> RCK Computer Services
> http://reclaimedcomputers.ca/
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> log4perl-devel mailing list
> log...@li...
> https://lists.sourceforge.net/lists/listinfo/log4perl-devel
>