Wow, didn't know syslog did all that. I won't be changing the permissions though, but now have more to learn. Thanks a bunch. E Wilson On 6 September 2010 15:46, Gerardo Exequiel Pozzi <vmlinuz386@yahoo.com.ar> wrote:

 On 09/06/2010 02:37 AM, E Wilson wrote:

...

Hi group

When I make my auth.log file world-readable (big security risk), the system reverts it to unreadable by world.  Could someone tell me what kind program/daemon is changing the permissions back and if said daemon has a log somewhere. I would like to shake its hand. something out of cron?

This is Arch running in a hosted VM environment.

Thanks E Wilson (New Linux and Arch User)

in /etc/syslog-ng.conf

-destination d_authlog { file("/var/log/auth.log"); }; +destination d_authlog { file("/var/log/auth.log" perm(0644)); };

good luck!

-- Gerardo Exequiel Pozzi \cos^2\alpha + \sin^2\alpha = 1