id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	uname	nginx_version
179	logrotate improvements	unlim.myid.net	sb	"currently logrotate job (/etc/logrotate.d/nginx) creates archives with 644 and root:root permissions.
Better to create them as 640 and nginx:nginx.
At least 640 should be used.


# ls -l /var/log/nginx/
total 205580
drwxr-xr-x 2 root  root      4096 Jun 25 04:42 ./
drwxr-xr-x 9 root  root      4096 Jun 25 04:42 ../
-rw-r----- 1 nginx nginx 42206375 Jun 25 13:56 access.log
-rw-r----- 1 nginx nginx 80435629 Jun 25 04:42 access.log.1
-rw-r--r-- 1 root  root  87237684 Jun 25 04:42 access.log.2.gz
-rw-r----- 1 nginx nginx     1162 Jun 25 13:41 error.log
-rw-r----- 1 nginx nginx      884 Jun 24 14:39 error.log.1
-rw-r--r-- 1 root  root     38984 Jun 25 04:42 error.log.2.gz
-rw-r--r-- 1 nginx root    339808 Jun 25 13:54 vhost-error_log

Seems directive ""create 0640 nginx nginx"" should help.

Thank you!"	enhancement	closed	minor		nginx-package	1.2.x	worksforme			-	"nginx version: nginx/1.2.1
built by gcc 4.1.2 20080704 (Red Hat 4.1.2-51)
TLS SNI support disabled
configure arguments: --prefix=/etc/nginx/ --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-mail --with-mail_ssl_module --with-file-aio --with-ipv6 --with-cc-opt='-O2 -g -m64 -mtune=generic'
"