Access denied for apache log, why ? (see getfacl !)

Community Support System
1

Hello

I have changed the group permission for my user adding www-data as primary group. Now I stuck with a very strange behavior regarding permissions : my user can’t access to apache logs : when I open the log file, nano open with a blank page and the message [ Error reading /var/log/apache2/domains/mysite.com.error.log: Permission denied ].

Regarding the files and folder permissions, I can’ understand why. This makes no sense to me.
Is someone has an idea, please ?

myuser@myserver:/var/log/apache2/domains$ getfacl mysite.com.error.log
# file: mysite.com.error.log
# owner: www-data
# group: myuser
user::rw-
group::r--
other::---

myuser@myserver:/var/log$ nano /var/log/apache2/domains/mysite.com.error.log
-->> [ Error reading /var/log/apache2/domains/mysite.com.error.log: Permission denied ]

And up folders seem ok to :

myuser@myserver:/var/log$ ls -l
drwxr-x--x  3 root      adm                4096 Sep 20 23:30 apache2
root@myserver:/var/log/apache2# ls -l
drwxr-xr-x 2 root root  4096 Sep 20 23:29 domains

and of course root user has access.

2

Hi,

How did you do that?

Show the output of:

id myuser
3

Hello sahsanu,

root@myserver:/# id myuser
uid=1004(myuser) gid=33(www-data) groups=33(www-data),987(hestia-users)

and I did :

root@myserver:/# usermod -g www-data myuser
thank you for your help !

4

Group www-data doesn’t have access to the log file, the group of your user does but you removed it when you added www-data as primary group.

Just add again your user’s group.

usermod -a -G myuser myuser
5

You find it !

Now

root@myserver:~# id myuser
uid=1004(myuser) gid=33(www-data) groups=33(www-data),987(hestia-users),1004(myuser)

and

myuser@myserver:/var/log$ nano /var/log/apache2/domains/mysite.com.error.log

works !
Thank you !