logrotate 文件切割 权限问题

From root@master.localdomain Fri Sep 28 06:36:02 2018
Return-Path: <root@master.localdomain>
X-Original-To: root
Delivered-To: root@master.localdomain
Received: by master.localdomain (Postfix, from userid 0)
id CD5FFC070DD4; Fri, 28 Sep 2018 06:36:02 -0400 (EDT)
From: Anacron <root@master.localdomain>
To: root@master.localdomain
Content-Type: text/plain; charset="UTF-8"
Subject: Anacron job 'cron.daily' on master
Message-Id: <20180928103602.CD5FFC070DD4@master.localdomain>
Date: Fri, 28 Sep 2018 06:36:02 -0400 (EDT)

/etc/cron.daily/logrotate:

error: skipping "/var/log/salt/master" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
error: skipping "/var/log/salt/minion" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
error: skipping "/var/log/salt/key" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

 

 

解决: 在配置文件中添加

su root list

vim /etc/logrotate.d/salt

/var/log/salt/master {
su root root
weekly
missingok
rotate 7
compress
notifempty
}

/var/log/salt/minion {
su root root
weekly
missingok
rotate 7
compress
notifempty
}

/var/log/salt/key {
su root root
weekly
missingok
rotate 7
compress
notifempty
}