I'm having difficulties transfering my logs off my ASL box. If I login with 'loginuser' on the ASL box with WinSCP and attempt to copy the entire /var/log folder, I get an 'Access Denied' message. Since I can't su root in WinSCP and don't want to allow root SSH access, what are my options? Can I chmod all the logs to read public or are there other implications with that?
Here's a solution that will let you download the log files anytime without having to use tar.
Make sure that ssh is enabled Login as loginuser su - usermod -G log loginuser exit exit
loginuser will now be a member of the "log" group which has read & write permissions to the log files. Of course, you need to consider the security problem this creates as anyone who obtains the loginuser password can hide his trail. Consider turning off ssh when not needed to provide a counterbalance.