Permission denied when writing logs

[apvargas]

Hello, I currently have the PMG v 6.1 in production environment, I am throwing the following error when starting the services with the following command:

#systemctl restart pmgproxy

The error is as follows:

# unable to open log file '/var/log/pmgproxy/pmgproxy.log' - Permission denied

The current permissions of the file are:

-rw-r ----- 1 www-data www-data 157M Feb 28 13:17 pmgproxy.log

Grateful for the support

 

[Stoiko Ivanov]

What's the permissions of:
/var
/var/log
/var/log/pmgproxy
?

 

[apvargas]

Hi, the permissions of the directories are as follows:

drwxr-xr-x 11 root root 4.0K Feb 19 2019 var

drwxr-xr-x 13 root root 4.0K Mar 2 00:00 log

-rw-r--r-- 1 www-data www-data 157M Feb 28 13:17 pmgproxy.log


Best Regards
Ángel

 

[Stoiko Ivanov]

and the permission of the directory /var/log/pmgproxy?
(`ls -la /var/log/pmgproxy` - the complete output)

 

[apvargas]

Hi, Hi, the result of the command:
root@mail-gateway:/var/log# ls -la /var/log/pmgproxy
total 160180
drw-r----- 2 root adm 4096 Nov 8 13:27 .
drwxr-xr-x 13 root root 4096 Mar 2 00:00 ..
-rw-r--r-- 1 www-data www-data 164011405 Feb 28 13:17 pmgproxy.log


Best regards

 

[Stoiko Ivanov]

drw-r----- 2 root adm 4096 Nov 8 13:27 .

That is the issue - the directory should belong to 'www-data:www-data' and have permission of 755:
run:

chown www-data:www-data /var/log/pmgproxy
chmod 755 /var/log/pmgproxy

and try starting pmgproxy again

 

[apvargas]

Hi, perfect!, it worked correctly. Very grateful for the support sir.


Best regards

 

[Stoiko Ivanov]

Glad that solved it - please mark the thread as 'SOLVED' - this helps others in a similar situation

 

[PeteMox]

That is the issue - the directory should belong to 'www-data:www-data' and have permission of 755:
run:

chown www-data:www-data /var/log/pmgproxy
chmod 755 /var/log/pmgproxy

and try starting pmgproxy again

Thank you! I did have to set ownership and 755 to /var/log/pveproxy/access.log specifically before the proxy service status would stop throwing access denied errors.

Have a great day