Hello,
I can not speak to whether or not changing the permissions to rwxr-xr-x
without any adverse affects to the puppetserver process, but I think I
spotted a possible solution.

Does the file permissions show a period ( a dot . ) at the end of the
permissions list, like this?
# ls -l /etc/somefile
-rw-r-----. 1 root root 27 Jun  4 19:29 /etc/somefile

If so then your linux filesystem appears to support extended attributes and
Access Control Lists and you can set ACLs, on a per file or per directory
basis.
https://superuser.com/questions/230559/what-does-the-dot-mean-at-the-end-of-rw-r-r-how-do-you-set-it-with-chmod
https://wiki.archlinux.org/index.php/Access_Control_Lists

In this example I am giving a nonpriv user read access to a file that is
640 via the ACL:
[root@centos7 etc]# ls -l /etc/somefile
-rw-r-----. 1 root root 27 Jun  4 19:29 /etc/somefile
[root@centos7 etc]#
setfacl -m u:nonprivuser:r /etc/somefile
[root@centos7 etc]# getfacl somefile
# file: somefile
# owner: root
# group: root
user::rw-
user:nonprivuser:r--
group::r--
mask::r--
other::---

Regards,
James

On Tue, Jun 4, 2019 at 1:59 PM Peter Krawetzky <[email protected]> wrote:

> I want to be able to ingest the puppet servers logs into splunk but the
> owner of the directory is puppet:puppet and the permissions are
> /var/log/puppetlabs/puppet rwxr-x---.  Since other has no access, the
> splunk service will not be able to read the log files.  Can I just change
> the permissions to rwxr-xr-x without any adverse affects to the
> puppetserver process?  Is there a way to do this in a puppetserver config
> file like logback.xml?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/puppet-users/0c69b316-a7ff-4417-84db-eb46f92882a4%40googlegroups.com
> <https://groups.google.com/d/msgid/puppet-users/0c69b316-a7ff-4417-84db-eb46f92882a4%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAOsPUchoq%2ByaThWEeL5%3DUwWDj7vd9WkEj2p8R1N0vhx9Q5bdCQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to