[H-GEN] syslog

[Martin Pool]

> >> Obvious question, how do I permanently remove read access from all but root

I thought this was a trol on the first reading. :-) Sorry.

(Craig suggested:)
> So if such log-rotation scripts exist, then they'll need modification
> too (basically by adding the chmod line to them). 

Foo.  If you take this approach, you'll never find all of the scripts
which need modification.

You might try

  # chgrp wheel /var/log; chmod 2750 /var/log

so that only good people can browse the log files.

Though it isn't always the case, log-rotation files should be designed to
preserve ownership and permissions.  It's not that hard.

--
Martin

----------------------- HUMBUG General List --------------------------------
echo "unsubscribe general" | mail majordomo at humbug.org.au # To Unsubscribe