Hi, The doc says "Please note that the actual permission depend on rsyslogd’s process umask. If in doubt, use “$umask 0000” right at the beginning of the configuration file to remove any restrictions.".
https://www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html#id10 Maybe something to check. Regards, Flo On Tue, Nov 6, 2018 at 11:01 AM sophie.loewenthal--- via rsyslog < [email protected]> wrote: > Hi, > > I have these global settings and this template: > # misc config > global( > workDirectory="/app/rsyslog" ) > $CreateDirs on > $fileOwner root > $fileGroup admin > $dirGroup admin > $FileCreateMode 0640 > > action(type="omfile" dirCreateMode="0750" fileCreateMode="0640" > fileGroup="admin" > File="/soft/rsyslog/messages.all") > > But the file and the directory is always created thus. The above settings > seem to have no effect > > drwxr-xr-x 3 root root 8192 Nov 6 10:52 . > -rw------- 1 root admin 169 Nov 6 10:52 messages.all > > The debug gave this: > 8250.670445905:main thread : syssock.ratelimit.severity: (unset) > 8250.670471472:main thread : cnf:global:cfsysline: $CreateDirs on > 8250.670477425:main thread : cnf:global:cfsysline: $fileOwner root > 8250.670543724:main thread : uid 0 obtained for user 'root' > 8250.670550042:main thread : cnf:global:cfsysline: $fileGroup admin > 8250.670612234:main thread : gid 1000 obtained for group 'admin' > 8250.670617887:main thread : cnf:global:cfsysline: $dirGroup admin > 8250.670645808:main thread : gid 1000 obtained for group 'admin' > 8250.670650386:main thread : cnf:global:cfsysline: $FileCreateMode 0640 > 8250.670886419:main thread : cnf:global:obj: obj: 'global' > 8250.670891193:main thread : nvlst 0x5631ac1f5b50: > 8250.670894306:main thread : name: 'workDirectory', value > '/app/rsyslog' > 8250.670898140:main thread : nvlstGetParam: name 'workdirectory', type > 14, valnode->bUsed 0 > 8250.670902327:main thread : glbl param blk after glblProcessCnf: > 8250.670904950:main thread : workdirectory: '/app/rsyslog' > 8250.670910759:main thread : dropmsgswithmaliciousdnsptrrecords: (unset) > > > My question : > How can I set this, and why did my settings above not work? > drwxr-x--- 3 root admin 8192 Nov 6 10:52 . > -rw-r----- 1 root admin 169 Nov 6 10:52 messages.all > > > > May thanks, again, for any help. > Sophie > > This message and any attachments (the "message") is > intended solely for the intended addressees and is confidential. > If you receive this message in error,or are not the intended recipient(s), > please delete it and any copies from your systems and immediately notify > the sender. Any unauthorized view, use that does not comply with its > purpose, > dissemination or disclosure, either whole or partial, is prohibited. Since > the internet > cannot guarantee the integrity of this message which may not be reliable, > BNP PARIBAS > (and its subsidiaries) shall not be liable for the message if modified, > changed or falsified. > Do not print this message unless it is necessary, consider the environment. > > > ---------------------------------------------------------------------------------------------------------------------------------- > > Ce message et toutes les pieces jointes (ci-apres le "message") > sont etablis a l'intention exclusive de ses destinataires et sont > confidentiels. > Si vous recevez ce message par erreur ou s'il ne vous est pas destine, > merci de le detruire ainsi que toute copie de votre systeme et d'en avertir > immediatement l'expediteur. Toute lecture non autorisee, toute utilisation > de > ce message qui n'est pas conforme a sa destination, toute diffusion ou > toute > publication, totale ou partielle, est interdite. L'Internet ne permettant > pas d'assurer > l'integrite de ce message electronique susceptible d'alteration, BNP > Paribas > (et ses filiales) decline(nt) toute responsabilite au titre de ce message > dans l'hypothese > ou il aurait ete modifie, deforme ou falsifie. > N'imprimez ce message que si necessaire, pensez a l'environnement. > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

