Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 3 subscribers
  • Views 6091 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSH/SCP Log File transfer

shultzm
I'm having difficulties transfering my logs off my ASL box. If I login with 'loginuser' on the ASL box with WinSCP and attempt to copy the entire /var/log folder, I get an 'Access Denied' message.  Since I can't su root in WinSCP and don't want to allow root SSH access, what are my options?  Can I chmod all the logs to read public or are there other implications with that?

And help would be appreciated.


This thread was automatically locked due to age.
Parents
  • 0
    You could copy or tar/bzip it up as root, and put it in /tmp, and chmod it as readable.

    Make sure you don't completely fill up the /tmp partition.

    Barry
  • 0 in reply to BarryG
    Good idea, thanks.  I can't believe I call myself an admin and didn't think of that myself.
  • 0 in reply to shultzm
    Here's a solution that will let you download the log files anytime without having to use tar.

    Make sure that ssh is enabled
    Login as loginuser
    su -
    usermod -G log loginuser
    exit
    exit

    loginuser will now be a member of the "log" group which has read & write permissions to the log files.  Of course, you need to consider the security problem this creates as anyone who obtains the loginuser password can hide his trail.  Consider turning off ssh when not needed to provide a counterbalance.
Reply
  • 0 in reply to shultzm
    Here's a solution that will let you download the log files anytime without having to use tar.

    Make sure that ssh is enabled
    Login as loginuser
    su -
    usermod -G log loginuser
    exit
    exit

    loginuser will now be a member of the "log" group which has read & write permissions to the log files.  Of course, you need to consider the security problem this creates as anyone who obtains the loginuser password can hide his trail.  Consider turning off ssh when not needed to provide a counterbalance.
Children
No Data