On Sun, 8 Dec 2024 at 23:03, Patrick O'Callaghan <pocallag...@gmail.com>
wrote:

> Dec 08 00:11:51 Bree logrotate[418079]: error: unable to open
> /var/log/sssd/sssd_kcm.log-20241027 (read-only) for compression: Permission
> denied
>


However:
>
> $ sudo ls -lZ /var/log/sssd/sssd_kcm.log-20241027
> -rw-------. 1 root root system_u:object_r:sssd_var_log_t:s0 2441 Oct 27
> 00:00 /var/log/sssd/sssd_kcm.log-20241027
>

Is this logrotate trying to compress the
pre-existing /var/log/sssd/sssd_kcm.log-20241027

Or logrotate trying to copytruncate (or whatever)
/var/log/sssd/sssd_kcm.log to /var/log/sssd/sssd_kcm.log-20241027?

Things I'd probably check:
1. The permissions, selinux context, and extended attributes (lsattr) of
the intervening directories to the file /var/log/sssd/, /var/log/, /var/
2. df -k /var, /var/log (and maybe even /var/log/sssd, although it's wildly
unlikely that's a separate mount point?)

"(read-only) for compression: Permission denied" definitely looks
permission-y but that could equally be a filled filesystem or something
else along the path?

Can you do a manual logrotate and reproduce? If so, can you strace that to
see where it's failing?
-- 
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to