Bsrgvty

You may need me after too many

paying debt collector's invalid rent claim, then suing landlord for money back

Is there a name for the phenomenon of false positives counterintuitively outstripping true positives

Wood glue versus epoxy for doweling stripped screw holes

What would you do? Different results than what is reported

Palindrome and Reverse a String Problems (JavaScript, Python)

Why is Microwaved mac & cheese burnt where they touch?

Why is a 737 Original speed-restricted below 10,000 ft with inoperative windscreen heating?

Knights covering a 9x9 chess board

Is the EU Settlement Scheme legal?

How to delete music as it's being played

prevent add-on being enabled in lower Blender version than 2.8

Increase size of square brackets

Phrase: the sun is out

Articles at the beginning of sentences in scientific writing

529 accounts for multiple kids

Find the closest enemy

I love fishing, dancing, playing, crafting, and fighting

How do Italians make a statement a question?

Do I need a visa for Japan as a New Zealand Citizen?

What kind of mathematical disciplines would be most useful for physics?

Length-terminated sequences

How to get previous command without arrow key

Endless disc brake issues

Give 2 users folder permissions only works periodically

Default file permissions for php user www-dataHow do I set the permissions for newly created files?Add www-data to alternate groupHow to setup Restricted (permission) access for Directories in Apache2 web serverMoving and deleting files in setguid foldersOwnCloud: Permission denied for www-data on mounted driveIssue with folder permissionsCannot stat 'direction', permission denied when permission's are setisc_stdio_open '/var/log/bind9/query.log' failed: permission deniedCertain git commands (diff, log) require sudo priviledges

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty
margin-bottom:0;

0

I have a weird issue with folder permissions on my ubuntu server.

I have 2 users which need access to nginx logs, www-data (nginx) and dd-agent (datadog, a logging service).

I created a group logusers and added both users to that group, then I changed permissions as follows:

sudo chown -R dd-agent:logusers /var/log/nginx/

I can see the following for ls -l:

drwxr-xr-x 2 dd-agent logusers 4096 May 29 06:25 nginx

Then I check both the status of the dd-service and nginx-service, and both are fine, but after a couple of hours, datadog reports a permission denied error for opening a file inside /var/log/nginx/.

How can I make sure both users have proper access? Why does this change over time?

--Edit:
Restarting the datadog-agent service and checking its status again shows no permission errors. This is weird.

server 18.04 permissions

share|improve this question

edited May 29 at 7:16

ffritz

asked May 29 at 7:10

ffritzffritz

10122 bronze badges

• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  has that file been newly created, probably with different rights? have you checked ls -la /var/log/nginx/specific-file
  
  – AlexOnLinux
  May 29 at 7:18
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I don't understand why you create a new group to do that. Why don't you add the users to the www-data and dd-agent groups?
  
  – mook765
  May 29 at 7:20
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  @AlexOnLinux Indeed is has been. -rw-r----- 1 dd-agent logusers 118883 May 29 09:25 access.log
  
  – ffritz
  May 29 at 7:28
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Also remind : newly created files in /var/log/nginx/ (after the chown-command) will not be associated with the grouplogusers.
  
  – mook765
  May 29 at 7:28
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @mook765 So sudo usermod -a -G www-data dd-agent and sudo chown -R www-data:www-data /var/log/nginx/ should do it right?
  
  – ffritz
  May 29 at 9:01
  

  
  
  
  

add a comment
 | 

0

I have a weird issue with folder permissions on my ubuntu server.

I have 2 users which need access to nginx logs, www-data (nginx) and dd-agent (datadog, a logging service).

I created a group logusers and added both users to that group, then I changed permissions as follows:

sudo chown -R dd-agent:logusers /var/log/nginx/

I can see the following for ls -l:

drwxr-xr-x 2 dd-agent logusers 4096 May 29 06:25 nginx

Then I check both the status of the dd-service and nginx-service, and both are fine, but after a couple of hours, datadog reports a permission denied error for opening a file inside /var/log/nginx/.

How can I make sure both users have proper access? Why does this change over time?

--Edit:
Restarting the datadog-agent service and checking its status again shows no permission errors. This is weird.

server 18.04 permissions

share|improve this question

edited May 29 at 7:16

ffritz

asked May 29 at 7:10

ffritzffritz

10122 bronze badges

• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  has that file been newly created, probably with different rights? have you checked ls -la /var/log/nginx/specific-file
  
  – AlexOnLinux
  May 29 at 7:18
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I don't understand why you create a new group to do that. Why don't you add the users to the www-data and dd-agent groups?
  
  – mook765
  May 29 at 7:20
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  @AlexOnLinux Indeed is has been. -rw-r----- 1 dd-agent logusers 118883 May 29 09:25 access.log
  
  – ffritz
  May 29 at 7:28
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Also remind : newly created files in /var/log/nginx/ (after the chown-command) will not be associated with the grouplogusers.
  
  – mook765
  May 29 at 7:28
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @mook765 So sudo usermod -a -G www-data dd-agent and sudo chown -R www-data:www-data /var/log/nginx/ should do it right?
  
  – ffritz
  May 29 at 9:01
  

  
  
  
  

add a comment
 | 

I have a weird issue with folder permissions on my ubuntu server.

I have 2 users which need access to nginx logs, www-data (nginx) and dd-agent (datadog, a logging service).

I created a group logusers and added both users to that group, then I changed permissions as follows:

sudo chown -R dd-agent:logusers /var/log/nginx/

I can see the following for ls -l:

drwxr-xr-x 2 dd-agent logusers 4096 May 29 06:25 nginx

Then I check both the status of the dd-service and nginx-service, and both are fine, but after a couple of hours, datadog reports a permission denied error for opening a file inside /var/log/nginx/.

How can I make sure both users have proper access? Why does this change over time?

--Edit:
Restarting the datadog-agent service and checking its status again shows no permission errors. This is weird.

server 18.04 permissions

share|improve this question

edited May 29 at 7:16

ffritz

asked May 29 at 7:10

ffritzffritz

10122 bronze badges

share|improve this question

edited May 29 at 7:16

ffritz

asked May 29 at 7:10

ffritzffritz

10122 bronze badges

share|improve this question

edited May 29 at 7:16

ffritz

asked May 29 at 7:10

ffritzffritz

10122 bronze badges

asked May 29 at 7:10

ffritzffritz

10122 bronze badges

asked May 29 at 7:10

ffritzffritz

10122 bronze badges

1 Answer
1

active

oldest

votes

0

if you want your new created files to be created as the group you specified to the folder you could do the following

sudo chmod g+s /var/log/nginx/

this will set the SGID-Bit ( Set Group ID ) to the folder with the result that every new created file inside that folder will inherit the group of the folder.

share|improve this answer

answered May 29 at 9:00

AlexOnLinuxAlexOnLinux

60233 silver badges1414 bronze badges

add a comment
 | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "89"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/4.0/"u003ecc by-sa 4.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1147029%2fgive-2-users-folder-permissions-only-works-periodically%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

if you want your new created files to be created as the group you specified to the folder you could do the following

sudo chmod g+s /var/log/nginx/

this will set the SGID-Bit ( Set Group ID ) to the folder with the result that every new created file inside that folder will inherit the group of the folder.

share|improve this answer

answered May 29 at 9:00

AlexOnLinuxAlexOnLinux

60233 silver badges1414 bronze badges

add a comment
 | 

0

if you want your new created files to be created as the group you specified to the folder you could do the following

sudo chmod g+s /var/log/nginx/

this will set the SGID-Bit ( Set Group ID ) to the folder with the result that every new created file inside that folder will inherit the group of the folder.

share|improve this answer

answered May 29 at 9:00

AlexOnLinuxAlexOnLinux

60233 silver badges1414 bronze badges

add a comment
 | 

if you want your new created files to be created as the group you specified to the folder you could do the following

sudo chmod g+s /var/log/nginx/

this will set the SGID-Bit ( Set Group ID ) to the folder with the result that every new created file inside that folder will inherit the group of the folder.

share|improve this answer

answered May 29 at 9:00

AlexOnLinuxAlexOnLinux

60233 silver badges1414 bronze badges

sudo chmod g+s /var/log/nginx/

share|improve this answer

answered May 29 at 9:00

AlexOnLinuxAlexOnLinux

60233 silver badges1414 bronze badges

answered May 29 at 9:00

AlexOnLinuxAlexOnLinux

60233 silver badges1414 bronze badges

answered May 29 at 9:00

AlexOnLinuxAlexOnLinux

60233 silver badges1414 bronze badges