What is the most secure way to allow a user read access to a log file?

Posted by gAMBOOKa on Server Fault See other posts from Server Fault or by gAMBOOKa
Published on 2011-04-12T15:59:03Z Indexed on 2012/07/09 9:17 UTC
Read the original article Hit count: 228

My application requires read access to /var/log/messages, which belongs to user and group root. What is the minimal exposure level required on /var/log/messages so my application can read it?

Presently, my plan is to change the group ownership of /var/log/messages to a new group, and add root and my application user to it, but this would also give the application write privileges to /var/log/messages.

OS: Centos 5.5

© Server Fault or respective owner

Related posts about linux

Related posts about centos