aboutsummaryrefslogtreecommitdiffstats
path: root/main/fail2ban/fail2ban.logrotate
diff options
context:
space:
mode:
authorStuart Cardall <developer@it-offshore.co.uk>2018-01-09 08:08:40 +0000
committerNatanael Copa <ncopa@alpinelinux.org>2018-08-24 08:19:48 +0000
commit8b14324d24a1ae2b9746f9b225872acd50a72f92 (patch)
tree4ab00d436fb5df6fd665b91c63802b3bb04cb97b /main/fail2ban/fail2ban.logrotate
parente524bf7b4f23bcac0071afd7533e0ee97dc7b260 (diff)
downloadaports-8b14324d24a1ae2b9746f9b225872acd50a72f92.tar.bz2
aports-8b14324d24a1ae2b9746f9b225872acd50a72f92.tar.xz
main/fail2ban: improve logrotate script
* by default fail2ban's log has 600 root:root permissions this breaks logcheck & other log parsers that need read only group permissions * this patch provides the same permissions as syslog (640 :wheel)
Diffstat (limited to 'main/fail2ban/fail2ban.logrotate')
-rw-r--r--main/fail2ban/fail2ban.logrotate4
1 files changed, 3 insertions, 1 deletions
diff --git a/main/fail2ban/fail2ban.logrotate b/main/fail2ban/fail2ban.logrotate
index 5d22bd0395..f635c3ddde 100644
--- a/main/fail2ban/fail2ban.logrotate
+++ b/main/fail2ban/fail2ban.logrotate
@@ -4,6 +4,8 @@
missingok
compress
postrotate
- /usr/bin/fail2ban-client set logtarget /var/log/fail2ban.log 1>/dev/null || true
+ /usr/bin/fail2ban-client set logtarget /var/log/fail2ban.log 1>/dev/null || true
+ chown :wheel /var/log/fail2ban.log
+ chmod 640 /var/log/fail2ban.log
endscript
}