Re: ppp.log

[Matthias Berse <matthias.berse@ruhr-uni-bochum.de>]

On Mon, Nov 01, 1999 at 07:06:41PM +0100, Tomasz Wegrzanowski wrote:
> > >> Scavenging the mail folder uncovered Tomasz Wegrzanowski's letter:
> > >> > If user is in group dip he can use pon and poff but
> > >> > he cant use plog to see why dial failed etc.
> > >> > I think such user should be able to use plog also
> > >> > so /var/log/ppp.log should be own by root.dip not root.adm
Initially after syslogd creates this logfile it's owned by root.root and
worldrreadable. I had a hard time to figure out what happend as my dip
users weren't able to read it any more after a week.
Solution: a cron job is rotation logs once a week and ppp.log is one of
them. But instead of preserving group and owner it sets all logs it
rotates to root.adm. I wonder if it would be a great security trade off
if the attributes of the logfiles are preserved on rotating. (That's the
way I do it right now after slightly modifying the cron-script)

Any opinions on that??

Thanks,
Matthias

-- 
created at Mon Nov  1 21:08:11 CET 1999
+-------------------------------------------------+
|SnailMail: Matthias Berse/Bachstr. 28/44625 Herne|
|Voice:     +49-2323-42397                        |
|PGP-Public-Key available!                        |
+-------------------------------------------------+

This wasn't just plain terrible, this was fancy terrible.  This was terrible
with raisins in it.
		-- Dorothy Parker