<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>Setting audit logs as different group ID</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Is there a way to have the audit log files be a member of a different group (other then root)</FONT>
<BR><FONT SIZE=2 FACE="Arial">Currently I am seeing this:</FONT>
<BR><FONT SIZE=2 FACE="Arial">-rw-r----- 1 root root 837716 Aug 3 10:06 audit.log</FONT>
<BR><FONT SIZE=2 FACE="Arial">-r--r----- 1 root root 52428840 Aug 3 08:24 audit.log.1</FONT>
<BR><FONT SIZE=2 FACE="Arial">-r--r----- 1 root root 5242936 Jul 24 10:56 audit.log.2</FONT>
<BR><FONT SIZE=2 FACE="Arial">-r--r----- 1 root ntsecadm 5242911 Jul 23 15:33 audit.log.3</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I had originally set the group for /var/log/audit/audit.log to root:ntsecadm during post install or RH5</FONT>
<BR><FONT SIZE=2 FACE="Arial">After the audit logs rotate the new files take on root:root ownership, I would like them to also be root:ntsecadm</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Can this be set in audit.conf?</FONT>
<BR><B><I><SPAN LANG="ko"><FONT COLOR="#008080" FACE="Batang">Ameel Kamboh</FONT></SPAN></I></B>
<BR><I><SPAN LANG="en-us"><FONT COLOR="#800000" SIZE=2 FACE="Arial">SIP Core</FONT></SPAN></I><SPAN LANG="en-us"><FONT COLOR="#800000" SIZE=2 FACE="Arial"> Network and Security </FONT></SPAN>
<BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">Phone</FONT><FONT SIZE=2 FACE="Arial">: 972.685.4922 (esn 445-4922)</FONT></SPAN>
<BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">Mobile</FONT><FONT SIZE=2 FACE="Arial">: 978-590-2280</FONT></SPAN>
<BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">SIP</FONT><FONT SIZE=2 FACE="Arial">: akamboh@techtrial.com</FONT></SPAN>
<BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">email</FONT><FONT SIZE=2 FACE="Arial">: </FONT></SPAN><A HREF="mailto:akamboh@nortel.com"><SPAN LANG="fr"><U><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">akamboh@nortel.com</FONT></U></SPAN></A><SPAN LANG="fr"></SPAN><SPAN LANG="en-us"></SPAN>
</P>
<BR>
<BR>
</BODY>
</HTML>