access to log directory denied

"Andy Gayton" <[email protected]>
Newsgroups gmane.comp.djb.syslog
Message-ID <[email protected]>
G'dday,

I'm very new to Dan's tools - please excuse me if I'm missing something
absurdly obvious :)

I've just set up djbdns along with daemontools and ucspi-tcp.  I've followed
the instructions verbatim and have a my first working dns which I'm pretty
chuffed about :)

I'm having a problem with logging though.  readproctitle ps listing looks as
follows:

root      1459  1454  0 Aug30 ?        00:00:00 readproctitle service
errors: ...nied?setuidgid: fatal: unable to run multilog: access denied?setu

Permissions in /service/tinydns/log are set as follows:

[root] /etc/tinydns/log# ls -l
total 12
drwxr-sr-x    2 Gdnslog  Gdnslog      4096 Aug 31 01:40 main
-rwxr-xr-x    1 root     root           51 Aug 30 03:36 run
-rw-r--r--    1 Gdnslog  Gdnslog         0 Aug 30 03:36 status
drwx--S---    2 root     root         4096 Aug 31 02:21 supervise

My password file entries for the tinydns accounts are:

Gtinydns:x:500:500::/home/Gtinydns:/sbin/nologin
Gdnslog:x:501:501::/home/Gdnslog:/sbin/nologin

I created the entries with:

>useradd Gtinydns
>useradd Gdnslog
>usermod -L Gtinydns
>usermod -L Gdnslog

and then after reading that it's a good idea on the net:

>usermod -s /sbin/nologin Gtinydns
>usermod -s /sbin/nologin Gdnslog

I can manually recreate the error with:

[root] /etc/tinydns/log# setuidgid Gdnslog multilog ./main
setuidgid: fatal: unable to run multilog: access denied
[root] /etc/tinydns/log#

But the following does work:

[root] /etc/tinydns/log# setuidgid Gdnslog touch main/fred
[root] /etc/tinydns/log# ls -l main
total 0
-rw-r--r--    1 Gdnslog  Gdnslog         0 Aug 31 02:26 fred
[root] /etc/tinydns/log#

Any clues as to what I've over looked is greatly appreciated,

Andy.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.