Re: mod_log-any/1127: Log files for main server and virtual hosts are written with different UID/GID (fwd)

[Marc Slemko <ma...@znep.com>]

The following reply was made to PR mod_log-any/1127; it has been noted by GNATS.

From: Marc Slemko <ma...@znep.com>
To: Apache bugs database <ap...@apache.org>
Subject: Re: mod_log-any/1127: Log files for main server and virtual  hosts are written with different UID/GID (fwd)
Date: Fri, 12 Sep 1997 13:02:52 -0600 (MDT)

 
 
 
 ---------- Forwarded message ----------
 Date: Fri, 12 Sep 1997 10:44:33 -0700
 From: Steve Resnick <st...@ducksfeet.com>
 To: Marc Slemko <ma...@hyperreal.org>
 Subject: Re: mod_log-any/1127: Log files for main server and virtual  hosts are written with different UID/GID
 
 At 09:42 AM 9/12/97 -0700, you wrote:
 >Synopsis: Log files for main server and virtual hosts are written with
 different UID/GID
 >
 >State-Changed-From-To: open-analyzed
 >State-Changed-By: marc
 >State-Changed-When: Fri Sep 12 09:42:46 PDT 1997
 >State-Changed-Why:
 >As I said in the newsgroup, the code creates all logfiles
 >as the user that Apache starts as.
 >
 >Please show me the output of a "ls -ld logdir", where logdir
 >is the diretory your logfiles go in.
 
 	drwxrwxr-x   2 www      www          1024 Sep 12 08:22 httpd
 	This is from my /var/logs directory.
 
 >
 >What user are you starting Apache as?  Not the one you
 >run it as, but the one you start it as.
 
 I am starting it as root -- since I need to run at port 80 
 
 >
 >As I said before, they should all be owned by the user
 >that starts Apache.  The problem is not how the virtual
 >host logs are being created but how the main server log
 >is being created.
 >
 >
 
 I have one major concern and a question about all of this ...
 My concern is the incosistency of the UID/GID ownership of 
 log files with some seeming to be root and others not. 
 My concern is the usual what is running as root, what does it do,
 what holes does it allow for. 
 
 The other question I have is how to allow for my customers to truncate
 their log files (if I charge for disk space, they should be able to 
 truncate their files, no?) 
 
 Cheers,
 
 Steve