Ad Widget

Collapse

log files in /var/log

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • denso
    Member
    • Sep 2005
    • 32

    #1

    log files in /var/log

    What permissions should be granted to log files to be able to read then with zabbix ?

    I have a log file (/var/log/messages) that was set with 600 root:root
    zabbix is set as:
    zabbix:x:150:150:Zabbix Monitoring:/home/zabbix:/bin/bash
    and runs as zabbix
    I tried using permissions 604 on /var/log/messages which seemed like the proper permissions. I changed to user zabbix and parsed the log file just fine but when i started the zabbix agent I got a permission denied. I changed the log to 777 to test permissions and it worked.
    I tested permissions 640 and that worked.
    My question is... How does that work if zabbix should be starting as a normal user ?

    I am running zabbix 1.1, I love this product it is great work!
  • artesvida
    Junior Member
    • May 2007
    • 18

    #2
    zabbix user permissions

    I think I have the same problem re: user permissions on the zabbix user. I'm using a script that calls sms_client to send out pages. When I su to the zabbix user (interactive) I can use sms_client, but the zabbix_server daemon (which is logged in as the zabbix user) fails when using sms_client. The problem is in two spots -- the sms_client log file (ownership root:dialout, permissions 660) and the /dev/ttyS1 modem (ownership root:dialout, permissions 660). My zabbix user is in the dialout group, which is why it works when I su to the zabbix user. When I change permissions on the log file and the modem to 666, the zabbix_server daemon can successfully use the sms_client.

    I would just change the permissions to 666, but unfortunately I can't get the permissions on the modem to stick (yes, I've been tinkering with the MAKEDEV script and all) and besides, this should just work. It seems like the group membership of the zabbix user is ignored in the zabbix_server daemon. Why might this be happening?

    Comment

    Working...