[Bug 2026599] [NEW] rsyslogd does not have enough permission to do its job

Marco Galicia 2026599 at bugs.launchpad.net
Fri Jul 7 17:14:51 UTC 2023 

Public bug reported:

I have installed a new ubuntu  22.04 server. After installing ufw and a
mailer daemon and activate them. Rsyslog starts complaining about
permission denied error in the following files:

/var/log/ufw.log
/var/log/mail.err
/var/log/mail.log

and the following lines appear in journalctl.
Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]
Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2112.0 try https://www.rsyslog.com/e/2007 ]
Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]
Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2112.0 try https://www.rsyslog.com/e/2007 ]

Creating the files manually and adding the group rsyslog:rsyslog solves
the logs.

Expected behaviour: rsyslog has the adequate configuration to create the files in /var/log and update them.
What happened instead: the log files have to be created manually, or maybe, the default config of rsyslog modified. Or the permission of the /var/log folder have to be modified.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: rsyslog 8.2112.0-2ubuntu2.2
ProcVersionSignature: Ubuntu 5.15.0-76.83-generic 5.15.99
Uname: Linux 5.15.0-76-generic x86_64
ApportVersion: 2.20.11-0ubuntu82.5
Architecture: amd64
CasperMD5CheckResult: pass
Date: Fri Jul  7 17:07:50 2023
InstallationDate: Installed on 2023-07-07 (0 days ago)
InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release amd64 (20230217.1)
SourcePackage: rsyslog
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: rsyslog (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug jammy third-party-packages uec-images

** Description changed:

- I have installed a new ubuntu server. After installing ufw and a mailer
- daemon and activate them. Rsyslog starts complaining about permission
- denied error in the following files:
- 
+ I have installed a new ubuntu  22.04 server. After installing ufw and a
+ mailer daemon and activate them. Rsyslog starts complaining about
+ permission denied error in the following files:
  
  /var/log/ufw.log
  /var/log/mail.err
  /var/log/mail.log
  
- 
- and the following lines appear in journalctl. 
+ and the following lines appear in journalctl.
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2112.0 try https://www.rsyslog.com/e/2007 ]
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2112.0 try https://www.rsyslog.com/e/2007 ]
  
- 
- Creating the files manually and adding the group rsyslog:rsyslog solves the logs. 
+ Creating the files manually and adding the group rsyslog:rsyslog solves
+ the logs.
  
  Expected behaviour: rsyslog has the adequate configuration to create the files in /var/log and update them.
  What happened instead: the log files have to be created manually, or maybe, the default config of rsyslog modified. Or the permission of the /var/log folder have to be modified.
  
  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: rsyslog 8.2112.0-2ubuntu2.2
  ProcVersionSignature: Ubuntu 5.15.0-76.83-generic 5.15.99
  Uname: Linux 5.15.0-76-generic x86_64
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: amd64
  CasperMD5CheckResult: pass
  Date: Fri Jul  7 17:07:50 2023
  InstallationDate: Installed on 2023-07-07 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release amd64 (20230217.1)
  SourcePackage: rsyslog
  UpgradeStatus: No upgrade log present (probably fresh install)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/2026599

Title:
  rsyslogd does not have enough permission to do its job

Status in rsyslog package in Ubuntu:
  New

Bug description:
  I have installed a new ubuntu  22.04 server. After installing ufw and
  a mailer daemon and activate them. Rsyslog starts complaining about
  permission denied error in the following files:

  /var/log/ufw.log
  /var/log/mail.err
  /var/log/mail.log

  and the following lines appear in journalctl.
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2112.0 try https://www.rsyslog.com/e/2007 ]
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]
  Jul 07 17:01:01 x rsyslogd[4622]: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2112.0 try https://www.rsyslog.com/e/2007 ]

  Creating the files manually and adding the group rsyslog:rsyslog
  solves the logs.

  Expected behaviour: rsyslog has the adequate configuration to create the files in /var/log and update them.
  What happened instead: the log files have to be created manually, or maybe, the default config of rsyslog modified. Or the permission of the /var/log folder have to be modified.

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: rsyslog 8.2112.0-2ubuntu2.2
  ProcVersionSignature: Ubuntu 5.15.0-76.83-generic 5.15.99
  Uname: Linux 5.15.0-76-generic x86_64
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: amd64
  CasperMD5CheckResult: pass
  Date: Fri Jul  7 17:07:50 2023
  InstallationDate: Installed on 2023-07-07 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release amd64 (20230217.1)
  SourcePackage: rsyslog
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/2026599/+subscriptions

More information about the foundations-bugs mailing list