Re: Permissions on /var/log/ files

2013-07-17 Thread Matthew Miller
On Wed, Jul 17, 2013 at 06:59:06PM -0700, T.C. Hollingsworth wrote: > What gotchas, out of curiosity? > I've always done this with `usermod -aG group user`. Would that also > be affected? That's fine too. -a didn't aways exist, which made it painful, because you had to get the current list and re

Re: Permissions on /var/log/ files

2013-07-17 Thread T.C. Hollingsworth
On Wed, Jul 17, 2013 at 6:54 PM, Matthew Miller wrote: > system-config-users seems to be still available. It's moderately > user-friendly. From the command line, I think 'gpasswd groupname -a > username' is the easiest. (You can use groupmod, but it's got some gotchas > with behavior where gpasswd

Re: Permissions on /var/log/ files

2013-07-17 Thread Matthew Miller
On Thu, Jul 18, 2013 at 11:07:13AM +0930, Tim wrote: > Allegedly, on or about 17 July 2013, Matthew Miller sent: > > Type "groups" without your username to show your _current_ groups -- > > remember that adding yourself to a group doesn't take effect until you > > start a new session. (E.g. by logg

Re: Permissions on /var/log/ files

2013-07-17 Thread Tim
Allegedly, on or about 17 July 2013, Matthew Miller sent: > Type "groups" without your username to show your _current_ groups -- > remember that adding yourself to a group doesn't take effect until you > start a new session. (E.g. by logging out and in again.) Or opening a new terminal? Darned i

Re: Permissions on /var/log/ files

2013-07-17 Thread Reindl Harald
Am 17.07.2013 21:15, schrieb Joe Zeff: > On 07/17/2013 11:18 AM, Reindl Harald wrote: >> i did: "otherwise my /var/log/maillog on my workstation would not have 644" >> this is "logrotaded" - logrotate keeps the permissions/owner/group if >> not specified like below (which is my own config-piece)

Re: Permissions on /var/log/ files

2013-07-17 Thread Patrick O'Callaghan
On Wed, 2013-07-17 at 23:04 +0200, Suvayu Ali wrote: > PS: I guess I'm not thinking straight today. This thread has plenty > of evidence to that. :-/ "Even Homer nods" (no, not *that* Homer :-) poc -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription option

Re: Permissions on /var/log/ files

2013-07-17 Thread Suvayu Ali
On Wed, Jul 17, 2013 at 09:59:00PM +0100, Patrick O'Callaghan wrote: > On Wed, 2013-07-17 at 16:18 +0200, Suvayu Ali wrote: > > On Wed, Jul 17, 2013 at 03:59:35PM +0200, Timothy Murphy wrote: > > > I'm tired of saying "sudo less /var/log/maillog" or "messages". > > > > For /var/log/messages you co

Re: Permissions on /var/log/ files

2013-07-17 Thread Patrick O'Callaghan
On Wed, 2013-07-17 at 16:18 +0200, Suvayu Ali wrote: > On Wed, Jul 17, 2013 at 03:59:35PM +0200, Timothy Murphy wrote: > > I'm tired of saying "sudo less /var/log/maillog" or "messages". > > For /var/log/messages you could use `dmesg -T | less +G' instead. > > Hope this helps, That's not quite t

Re: Permissions on /var/log/ files

2013-07-17 Thread Suvayu Ali
On Wed, Jul 17, 2013 at 12:57:02PM -0400, Matthew Miller wrote: > On Wed, Jul 17, 2013 at 06:02:47PM +0200, Suvayu Ali wrote: > > > Note that if you're using the systemd journal (and you are, in recent > > > Fedora, including persistent logging to disk with F19), adding yourself to > > > the 'syste

Re: Permissions on /var/log/ files

2013-07-17 Thread Joe Zeff
On 07/17/2013 12:24 PM, Reindl Harald wrote: Am 17.07.2013 21:15, schrieb Joe Zeff: I'm the only person who ever uses my laptop. If I wanted, then, I could use this to make /var/log/messages world readable for convenience. No, I'm not going to do it because unless I do it to all of my ma

Re: Permissions on /var/log/ files

2013-07-17 Thread Joe Zeff
On 07/17/2013 11:18 AM, Reindl Harald wrote: i did: "otherwise my /var/log/maillog on my workstation would not have 644" this is "logrotaded" - logrotate keeps the permissions/owner/group if not specified like below (which is my own config-piece) /var/log/scriptlog { missingok notifemp

Re: Permissions on /var/log/ files

2013-07-17 Thread Roger K. Wells
On 07/17/2013 10:29 AM, Chris Adams wrote: Once upon a time, Timothy Murphy said: Will it cause any problems if I change the permissions on these files? Nope, been doing it for years. so have I. Never been a surprise or problem -- Roger Wells, P.E. SAIC 221 Third St Newport, RI 02840 401-84

Re: Permissions on /var/log/ files

2013-07-17 Thread Reindl Harald
Am 17.07.2013 20:08, schrieb Rick Stevens: > On 07/17/2013 08:36 AM, Reindl Harald issued this missive: >> *no they are not* >> otherwise my /var/log/maillog on my workstation would not have 644 > > The correct thing to say is "if syslog(whatever) has to CREATE the file, > it will not have world

Re: Permissions on /var/log/ files

2013-07-17 Thread Rick Stevens
On 07/17/2013 08:36 AM, Reindl Harald issued this missive: Am 17.07.2013 16:46, schrieb Suvayu Ali: On Wed, Jul 17, 2013 at 10:35:46PM +0800, Ed Greshko wrote: On 07/17/13 22:27, Timothy Murphy wrote: Ed Greshko wrote: Heck, you could always make your sudo password less and you could always

Re: Permissions on /var/log/ files

2013-07-17 Thread Reindl Harald
Am 17.07.2013 15:59, schrieb Timothy Murphy: > I'm tired of saying "sudo less /var/log/maillog" or "messages". > Is there any non-paranoiac reason for not making /var/log/ files > readable say by wheel? chown/chgrp/chmod exists [harry@rh:~]$ ls /var/log/maillog -rw-r--r-- 1 root root 7,1K 2013-

Re: Permissions on /var/log/ files

2013-07-17 Thread Reindl Harald
Am 17.07.2013 16:46, schrieb Suvayu Ali: > On Wed, Jul 17, 2013 at 10:35:46PM +0800, Ed Greshko wrote: >> On 07/17/13 22:27, Timothy Murphy wrote: >>> Ed Greshko wrote: Heck, you could always make your sudo password less and you could always assign the frequently used commands aliases.

Re: Permissions on /var/log/ files

2013-07-17 Thread Rick Stevens
On 07/17/2013 09:57 AM, Matthew Miller issued this missive: On Wed, Jul 17, 2013 at 09:44:41AM -0700, Rick Stevens wrote: The reason the files are, by default, NOT world-readable is simply one of security. Many programs (if using verbose logging) may expose security-related items in plaintext in

Re: Permissions on /var/log/ files

2013-07-17 Thread Matthew Miller
On Wed, Jul 17, 2013 at 09:44:41AM -0700, Rick Stevens wrote: > The reason the files are, by default, NOT world-readable is simply one > of security. Many programs (if using verbose logging) may expose > security-related items in plaintext in the log files (usernames, > passwords, GPG keys, etc.).

Re: Permissions on /var/log/ files

2013-07-17 Thread Matthew Miller
On Wed, Jul 17, 2013 at 06:02:47PM +0200, Suvayu Ali wrote: > > Note that if you're using the systemd journal (and you are, in recent > > Fedora, including persistent logging to disk with F19), adding yourself to > > the 'systemd-journal' group will allow you to see system logs with > > 'journalctl

Re: Permissions on /var/log/ files

2013-07-17 Thread Rick Stevens
On 07/17/2013 06:59 AM, Timothy Murphy issued this missive: I'm tired of saying "sudo less /var/log/maillog" or "messages". Is there any non-paranoiac reason for not making /var/log/ files readable say by wheel? The consensus seems to be that it's OK to change the permissions and I agree. Makin

Re: Permissions on /var/log/ files

2013-07-17 Thread Suvayu Ali
On Wed, Jul 17, 2013 at 11:21:20AM -0400, Matthew Miller wrote: > > Note that if you're using the systemd journal (and you are, in recent > Fedora, including persistent logging to disk with F19), adding yourself to > the 'systemd-journal' group will allow you to see system logs with > 'journalctl'

Re: Permissions on /var/log/ files

2013-07-17 Thread Steven Stern
On 07/17/2013 09:47 AM, Suvayu Ali wrote: > On Wed, Jul 17, 2013 at 09:29:04AM -0500, Chris Adams wrote: >> Once upon a time, Timothy Murphy said: >>> Will it cause any problems if I change the permissions on these files? >> >> Nope, been doing it for years. > > I thought changing the permission

Re: Permissions on /var/log/ files

2013-07-17 Thread Chris Adams
Once upon a time, Bryn M. Reeves said: > I'm trying to help Suvayu understand what he's getting confused over. > Conflicts between logrotate and manual changes are certainly more likely > than "something bad happened to syslog". There are only a few logrotate.d config files that set permissions a

Re: Permissions on /var/log/ files

2013-07-17 Thread Matthew Miller
On Wed, Jul 17, 2013 at 03:59:35PM +0200, Timothy Murphy wrote: > I'm tired of saying "sudo less /var/log/maillog" or "messages". > Is there any non-paranoiac reason for not making /var/log/ files > readable say by wheel? I think it's reasonable for /var/log/secure to require an extra level of aut

Re: Permissions on /var/log/ files

2013-07-17 Thread Suvayu Ali
On Wed, Jul 17, 2013 at 10:01:59AM -0500, Chris Adams wrote: > Once upon a time, Bryn M. Reeves said: > > On 07/17/2013 03:47 PM, Suvayu Ali wrote: > > > I thought changing the permission on /var/log/messages will cause > > > problems with syslog, no? > > > > Maybe you are thinking of logrotate?

Re: Permissions on /var/log/ files

2013-07-17 Thread Bryn M. Reeves
On 07/17/2013 04:01 PM, Chris Adams wrote: > Again, nope, at least for common log files. logrotate copies the > current ownership/permissions to the new files, unless otherwise > configured (and only a few files have that set in the default config; > they probably shouldn't either). *if the conf

Re: Permissions on /var/log/ files

2013-07-17 Thread Chris Adams
Once upon a time, Bryn M. Reeves said: > On 07/17/2013 03:47 PM, Suvayu Ali wrote: > > I thought changing the permission on /var/log/messages will cause > > problems with syslog, no? > > Maybe you are thinking of logrotate? If you make changes by hand these > will be undone when the logs are rota

Re: Permissions on /var/log/ files

2013-07-17 Thread Chris Adams
Once upon a time, Suvayu Ali said: > Your permission changes will be overwritten the moment a daemon sends a > message to syslog. No, they won't. Where did you get that idea? The syslog/rsyslog daemon runs as root and can write to the file, no matter the permissions. It doesn't ever change per

Re: Permissions on /var/log/ files

2013-07-17 Thread Bryn M. Reeves
On 07/17/2013 03:47 PM, Suvayu Ali wrote: > On Wed, Jul 17, 2013 at 09:29:04AM -0500, Chris Adams wrote: >> Once upon a time, Timothy Murphy said: >>> Will it cause any problems if I change the permissions on these files? >> >> Nope, been doing it for years. > > I thought changing the permission

Re: Permissions on /var/log/ files

2013-07-17 Thread Chris Adams
Once upon a time, Suvayu Ali said: > On Wed, Jul 17, 2013 at 09:29:04AM -0500, Chris Adams wrote: > > Once upon a time, Timothy Murphy said: > > > Will it cause any problems if I change the permissions on these files? > > > > Nope, been doing it for years. > > I thought changing the permission

Re: Permissions on /var/log/ files

2013-07-17 Thread Suvayu Ali
Hi Timothy, On Wed, Jul 17, 2013 at 10:35:46PM +0800, Ed Greshko wrote: > On 07/17/13 22:27, Timothy Murphy wrote: > > Ed Greshko wrote: > > > >> Heck, you could always make your sudo password less and you could always > >> assign the frequently used commands aliases. > > I guess my question shoul

Re: Permissions on /var/log/ files

2013-07-17 Thread Suvayu Ali
On Wed, Jul 17, 2013 at 09:29:04AM -0500, Chris Adams wrote: > Once upon a time, Timothy Murphy said: > > Will it cause any problems if I change the permissions on these files? > > Nope, been doing it for years. I thought changing the permission on /var/log/messages will cause problems with sysl

Re: Permissions on /var/log/ files

2013-07-17 Thread Ed Greshko
On 07/17/13 22:27, Timothy Murphy wrote: > Ed Greshko wrote: > >> Heck, you could always make your sudo password less and you could always >> assign the frequently used commands aliases. > I guess my question should have been: > Will it cause any problems if I change the permissions on these files?

Re: Permissions on /var/log/ files

2013-07-17 Thread Chris Adams
Once upon a time, Timothy Murphy said: > Will it cause any problems if I change the permissions on these files? Nope, been doing it for years. -- Chris Adams -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailm

Re: Permissions on /var/log/ files

2013-07-17 Thread Timothy Murphy
Ed Greshko wrote: > Heck, you could always make your sudo password less and you could always > assign the frequently used commands aliases. I guess my question should have been: Will it cause any problems if I change the permissions on these files? Is there any program that won't work if you do t

Re: Permissions on /var/log/ files

2013-07-17 Thread Suvayu Ali
On Wed, Jul 17, 2013 at 03:59:35PM +0200, Timothy Murphy wrote: > I'm tired of saying "sudo less /var/log/maillog" or "messages". For /var/log/messages you could use `dmesg -T | less +G' instead. Hope this helps, -- Suvayu Open source is the future. It sets us free. -- users mailing list user

Re: Permissions on /var/log/ files

2013-07-17 Thread Ed Greshko
On 07/17/13 21:59, Timothy Murphy wrote: > I'm tired of saying "sudo less /var/log/maillog" or "messages". > Is there any non-paranoiac reason for not making /var/log/ files > readable say by wheel? > > Heck, you could always make your sudo password less and you could always assign the frequently