https://bugzilla.novell.com/show_bug.cgi?id=790726 https://bugzilla.novell.com/show_bug.cgi?id=790726#c1 --- Comment #1 from Marcel Gmür 2012-11-21 15:05:26 UTC --- Are you sure, it is a bug of the package, not your local config? nginx does write logs as root (user who starts the master process) with the default config. workers (user nginx) open logs when there are variables in use, which could be logs for hosts (see http://nginx.org/en/docs/http/ngx_http_log_module.html#directives) example: access_log /spool/vhost/logs/$host; I changed this because of this rpmlint error: nginx.x86_64: W: suse-logrotate-user-writable-log-dir /var/log/nginx nginx:nginx 0755 The log directory is writable by unprivileged users. Please fix the permissions so only root can write there or add the 'su' option to your logrotate config Also tested on a container: linux:/var/log/nginx # l total 16 drwxr-x--- 2 root root 4096 Nov 21 14:54 ./ drwxr-xr-x 11 root root 4096 Nov 21 14:54 ../ -rw-r--r-- 1 root root 175 Nov 21 15:00 access.log -rw-r--r-- 1 root root 234 Nov 21 15:00 error.log If we would change logrotate to use su, the logfiles written by root (default nginx config) could not be rotated anymore. Now the question is what kind of logfiles are you trying to write to /var/log and do you think, it is the right place. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=790726 https://bugzilla.novell.com/show_bug.cgi?id=790726#c3 --- Comment #3 from IFAD Infrastructure Team 2012-11-21 15:18:05 UTC --- When nginx is first started yes, it runs as root and it can open those files - but when it is sent the USR1 signal, both the master and the workers, who run as user "nginx", reopen the log files, as explained by Igor Sysoev here: http://article.gmane.org/gmane.comp.web.nginx.english/181 As a matter of fact, the workers actually have open file descriptors to the log files: # ps axuwf|grep [n]ginx|head -2 root 2097 0.0 0.0 9460 1336 ? Ss Nov19 0:00 nginx: master process /usr/sbin/nginx nginx 2098 0.0 0.0 9464 2968 ? S Nov19 0:05 \_ nginx: worker process # lsof -p 2098|grep var.log|head -2 nginx 2098 nginx 2w REG 8,2 774994 904901 /var/log/nginx/error.log nginx 2098 nginx 4w REG 8,2 3292942 907416 /var/log/nginx/access.log So - what do you think is the best solution in this case? The only logs I've configured to be written in /var/log/nginx are per-vhost and per-location access logs - nothing special. Thank you, ~Marcello -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=790726 https://bugzilla.novell.com/show_bug.cgi?id=790726#c5 --- Comment #5 from IFAD Infrastructure Team 2012-11-21 18:18:32 UTC --- Thanks, but - why 755 instead of 750? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.