Additional fix required for syslog files created by the custom logging rules ,e.g.: -rw-r--r-- 1 root root 21K Jul 16 00:24 /var/log/alternatives.log -rw-r--r-- 1 root root 532 Jul 16 00:16 /var/log/boot.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/ceilometer-all.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/cinder-all.log -rw-r--r-- 1 root root 0 Jul 16 00:19 /var/log/corosync.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/cron.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/daemon.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/dashboard.log -rw-r--r-- 1 root root 478K Jul 16 00:36 /var/log/dpkg.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/glance-all.log -rw-r----- 1 root adm 0 Jul 16 08:31 /var/log/haproxy.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/heat-all.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/keystone-all.log -rw-r--r-- 1 root root 1.5M Jul 16 08:35 /var/log/mcollective.log -rw-r--r-- 1 root root 149 Jul 16 00:24 /var/log/memcached.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/murano-all.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/mysqld.log -rw-r--r-- 1 root root 12M Jul 16 08:35 /var/log/nailgun-agent.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/neutron-all.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/nova-all.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/pacemaker.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/sahara-all.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/user.log -rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/zabbix_server.log
Such files will be locked for syslog once he changed its running user
Additional fix required for syslog files created by the custom logging rules ,e.g.: alternatives. log ceilometer- all.log cinder- all.log corosync. log dashboard. log glance- all.log haproxy. log heat-all. log keystone- all.log mcollective. log memcached. log murano- all.log nailgun- agent.log neutron- all.log nova-all. log pacemaker. log sahara- all.log zabbix_ server. log
-rw-r--r-- 1 root root 21K Jul 16 00:24 /var/log/
-rw-r--r-- 1 root root 532 Jul 16 00:16 /var/log/boot.log
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r--r-- 1 root root 0 Jul 16 00:19 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/cron.log
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/daemon.log
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r--r-- 1 root root 478K Jul 16 00:36 /var/log/dpkg.log
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 08:31 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r--r-- 1 root root 1.5M Jul 16 08:35 /var/log/
-rw-r--r-- 1 root root 149 Jul 16 00:24 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/mysqld.log
-rw-r--r-- 1 root root 12M Jul 16 08:35 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/user.log
-rw-r----- 1 root adm 0 Jul 16 00:18 /var/log/
Such files will be locked for syslog once he changed its running user