file permission

byran cheung · 02-02-2015, 03:40 AM

I am writing a script to check the log file in /var/log , some files are only read by root , but the script use general user to access the system ( as the system do not accept root to ssh directly ) , therefore , it could not read such files .

Would advise what is the best method to solve this problem , copy the file to a special folder ? allow root to ssh ? create a user with root permission ?

very thanks

QYInst · 02-02-2015, 04:12 AM

Do you run the script at a remote server or local machine?

If it is at a remote server, then you can run the script as root using su command.
Otherwise I have the following suggestions:
1. Enable public key ssh access for root.
2. Running a script at the remote server as root, which copies the log to a file that your account via ssh can read.

veerain · 02-02-2015, 09:37 AM

Usually logs contain sensitive information that why regular users are not allowed to view them.

So as in above post login as root via ssh. Or your can make the logs group permission as read and make your user member of that group.

J Martin Rushton · 02-02-2015, 09:46 AM

Have you looked at logwatch? It is highly customisable if it doesn't do exactly as required.

maples · 02-02-2015, 11:50 AM

Quote:

Originally Posted by QYInst

...
1. Enable public key ssh access for root.

Uhhh... enabling ssh access for root is usually considered a Bad Idea™

chrism01 · 02-03-2015, 04:29 AM

Use sudo instead http://linux.die.net/man/5/sudoers
http://linux.die.net/man/8/visudo
http://linux.die.net/man/8/sudo