Wow, didn't know syslog did all that. I won't be changing the permissions though, but now have more to learn. Thanks a bunch. E Wilson On 6 September 2010 15:46, Gerardo Exequiel Pozzi <vmlinuz386@xxxxxxxxxxxx> wrote: > On 09/06/2010 02:37 AM, E Wilson wrote: >> >> Hi group >> >> When I make my auth.log file world-readable (big security risk), the >> system reverts it to unreadable by world. Could someone tell me what >> kind program/daemon is changing the permissions back and if said >> daemon has a log somewhere. I would like to shake its hand. something >> out of cron? >> >> This is Arch running in a hosted VM environment. >> >> Thanks >> E Wilson >> (New Linux and Arch User) >> > in /etc/syslog-ng.conf > > -destination d_authlog { file("/var/log/auth.log"); }; > +destination d_authlog { file("/var/log/auth.log" perm(0644)); }; > > good luck! > > > -- > Gerardo Exequiel Pozzi > \cos^2\alpha + \sin^2\alpha = 1 > > >