[ZBX-9575] logrotate snippet for zabbix-server lacks "su" directive Created: 2015 May 20  Updated: 2017 May 30  Resolved: 2015 Aug 05

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Installation (I)
Affects Version/s: 2.4.5
Fix Version/s: 2.2.10rc2, 2.4.6rc1

Type: Incident report Priority: Trivial
Reporter: D.Spindel Ljungmark Assignee: Unassigned
Resolution: Fixed Votes: 0
Labels: packaging
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

rpm / CentOS packages


 Description   

the zabbix-server logrotate snippet lacks "su zabbix zabbix" in there, and causes logrotate to not rotate logs

error: skipping "/var/log/zabbix/zabbix_server.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

 Comments   
Comment by richlv [ 2015 May 20 ]

which repository was used to install those packages ?

Comment by D.Spindel Ljungmark [ 2015 May 20 ]

$ rpm -qf /etc/logrotate.d/zabbix-server
zabbix-server-2.4.5-1.el7.x86_64

$ yum info zabbix-server
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile

  • base: ftp.availo.se
  • epel: mirror.nsc.liu.se
  • extras: mirror.nsc.liu.se
  • updates: mirror.nsc.liu.se
    Installed Packages
    Name : zabbix-server
    Arch : x86_64
    Version : 2.4.5
    Release : 1.el7
    Size : 14 k
    Repo : installed
    From repo : zabbix
    Summary : Zabbix server common files
    URL : http://www.zabbix.com/
    Licence : GPLv2+
    Description : Zabbix server common files.

$ cat /etc/yum.repos.d/zabbix.repo
[zabbix]
name=Zabbix Official Repository - $basearch
baseurl=http://repo.zabbix.com/zabbix/2.4/rhel/7/$basearch/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX

[zabbix-non-supported]
name=Zabbix Official Repository non-supported - $basearch
baseurl=http://repo.zabbix.com/non-supported/rhel/7/$basearch/
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX
gpgcheck=1

Comment by richlv [ 2015 May 20 ]

thanks. kodai, could you please take a look ?

Comment by Anton Samets [ 2015 May 21 ]

I suppose it's only for new versions of logrotate (Centos 7 or smth like this). For Centos 5, 6 it won't work.

Comment by Kodai Terashima [ 2015 Aug 05 ]

Fixed in 2.2.10 and 2.4.6 RHEL7 packages

Generated at Fri May 02 07:25:50 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.