ghantoos / lshell

lshell is a shell coded in Python, that lets you restrict a user's environment to limited sets of commands, choose to enable/disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restriction, and more.
GNU General Public License v3.0
436 stars 112 forks source link

Bugfix with logrotate #83

Closed deimosfr closed 9 years ago

deimosfr commented 10 years ago

Changing rights to avoid this issue with logrotate:

/etc/cron.daily/logrotate: error: skipping "/var/log/lshell/lshell.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

ghantoos commented 10 years ago

By changing the permissions from 770 to 750, you're making the directory not writable (at least to create the original files) by the users belonging to the lshell group (all lshell users).

Another solution would be to switch to syslog?