Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-51877

logrotate fails due to world writable permissions in sssd logs

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • CentOS Stream 10
    • sssd
    • None
    • No
    • None
    • rhel-sst-idm-sssd
    • ssg_idm
    • 0
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • All
    • None

      What were you trying to do that didn't work?

      Run logrotate

      Please provide the package NVR for which bug is seen:

      Name : logrotate
      Version : 3.21.0
      Release : 6.el10
      Architecture : x86_64
      Size : 148 k
      Source : logrotate-3.21.0-6.el10.src.rpm

      Name : sssd
      Version : 2.10.0~beta2
      Release : 1.el10
      Architecture : x86_64
      Size : 24 k
      Source : sssd-2.10.0~beta2-1.el10.src.rpm

      How reproducible: always

      Steps to reproduce

      1. dnf install logrotate
      2. /usr/sbin/logrotate /etc/logrotate.conf

      Expected results

      Nothing in the output, exits with zero

      Actual results

      1. /usr/sbin/logrotate /etc/logrotate.conf

      error: skipping "/var/log/sssd/sssd_kcm.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

      1. echo $?
        1

      (from Integration SIG testing)

              sssd-maint SSSD Maintainers
              carofe Carlos Rodriguez-Fernandez
              SSSD Maintainers SSSD Maintainers
              SSSD QE SSSD QE
              Louise McGarry Louise McGarry
              Votes:
              0 Vote for this issue
              Watchers:
              12 Start watching this issue

                Created:
                Updated:
                Resolved: