Log permission when rabbitmq starts is 640 instead 644

212 views
Skip to first unread message

Alexandru Cîtea

unread,
Mar 14, 2022, 4:52:31 PM3/14/22
to rabbitmq-users
Hello, 

I have an issue with the log permission for RabbitMQ. When I started the process, this created the log with 640 permission and I need to have 644. 
I think this happened after upgraded the rabbitmq to 3.9.5.

I can change manually the permission, but I want to fix this in other way, because if I will change manually the permission, if someone will stop the process and move the log and then start rabbitmq, the log will also be created with 640. 
Could you please help me with some suggestions?

I hope that this is not a stupid question. 
Thank you in advance. 
BR

Wes Peng

unread,
Mar 14, 2022, 7:11:17 PM3/14/22
to rabbitm...@googlegroups.com
Please reference this setting as well.

Thanks 

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-user...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/rabbitmq-users/ffcaabe3-f7aa-4cbf-bfdb-cb1e521c751en%40googlegroups.com.

Luke Bakken

unread,
Mar 15, 2022, 9:58:37 AM3/15/22
to rabbitmq-users
Hello,

The permissions are 0640 to prevent unwanted access to the RabbitMQ logs. There is no way at this time to indicate that you wish to have less strict access.

RabbitMQ supports logging to syslog, so you could set that up and have less strict access.

Thanks,
Luke

Alexandru Cîtea

unread,
Mar 15, 2022, 10:36:10 AM3/15/22
to rabbitmq-users
Thank you all for your answer.

So, there are no way to have 644 permission when RabbitMQ starts and the log are created for the first time? 
I understood with the logrotate how I can add this, but I need also in the case when the log is deleted/moved and RabbitMQ will create a new log.

Thank you!

Luke Bakken

unread,
Mar 15, 2022, 2:56:20 PM3/15/22
to rabbitmq-users
So, there are no way to have 644 permission when RabbitMQ starts and the log are created for the first time? 

Yep, that's exactly what I said.

But on second thought you may have a workaround, since RabbitMQ itself does not set log file permissions. When RabbitMQ is installed the installation process sets the permissions on /var/log/rabbitmq and I'm pretty sure it sets the sticky bit so that files created inherit the permissions. You may be able to address your issue by modifying the permissions on /var/log/rabbitmq

Thanks,
Luke
Reply all
Reply to author
Forward
0 new messages