access right changed on log directory

Zeek
1

Hello,

I have upgraded from 2.3.2 to 2.4 and find that spool/manager directory has not the same access right than before:

In 2.4:

drwxr-x— 3 root root 4096 Aug 21 17:36 manager

in 2.3.2:

drwxr-xr-x 2 root root 4096 Aug 21 17:13 manager

It’s a problem for me because I would like to view logs without being root. Is there a way to change the access right to log directory when starting bro?

Thanks

Regards,

Emmanuel.

2

Broctl creates that directory, but it doesn't explicitly
set or change its permissions. You should check the umask of the root
user on your system, and the umask setting for sudo (if you're using
sudo to run broctl). You want a umask of 0022.

3

Thanks Daniel,

I have used setgid to set read on the low privilege's group on the spool folder. Any files or folders created under spool by bro are now accessible by this group.

-----Message d'origine-----