On Fri, 2015-02-13 at 03:31 -0500, German Parente wrote:
Hi William,
the access mode for the rhds logs is set in these configuration settings under
cn=config:
nsslapd-auditlog-mode
nsslapd-errorlog-mode
nsslapd-accesslog-mode
I don't know whether we could use a value to just inherit from acl defined.
It seems that setting these from 600 to 660 I end up with
# file: access
# owner: nobody
# group: nobody
user::rw-
user:splunk:r-x #effective:r--
group::rwx #effective:r--
mask::r--
other::---
As opposed to before which was:
# file: access
# owner: nobody
# group: nobody
user::rw-
user:splunk:r-x #effective:---
group::rwx #effective:---
mask::---
other::---
So it looks like there is some interaction between the mode settings and
the acls mask. Any hints where in the source I could dig to find this?
--
William <william(a)firstyear.id.au>