beats icon indicating copy to clipboard operation
beats copied to clipboard

Filebeat registry permission setup does not allow all user access

Open distrue opened this issue 1 year ago • 2 comments

Using filebeat v8.6.2, on linux environment.

$ uname -a
Linux ip-172-26-57-142 5.15.0-1031-aws #35-Ubuntu SMP Fri Feb 10 02:07:18 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

According to configuration docs, I should be available to grant previlage to all users to read by setup permission to 0644. But in actual, only registry directory is set into 644 and registry data file is set to 640 as below.

ubuntu@ip-172-26-57-142:~$ sudo ls -al /var/lib/filebeat/registry
total 12
drwxr-x--- 3 root root 4096 Mar  6 17:24 .
drwxr-x--- 3 root root 4096 Mar  6 17:24 ..
drwxr-x--- 2 root root 4096 Mar  6 17:24 filebeat
ubuntu@ip-172-26-57-142:~$ sudo ls -al /var/lib/filebeat/registry/filebeat
total 12
drwxr-x--- 2 root root 4096 Mar  6 17:24 .
drwxr-x--- 3 root root 4096 Mar  6 17:24 ..
-rw-r----- 1 root root    0 Mar  6 17:24 log.json # <-- permission is set to 640
-rw-r----- 1 root root   15 Mar  6 17:24 meta.json

This situation occurs in every time when I remove registry folder (I set it /var/lib/filebeat in example) and restart systemd filebeat daemon.

distrue avatar Mar 06 '23 08:03 distrue

This issue doesn't have a Team:<team> label.

botelastic[bot] avatar Mar 06 '23 08:03 botelastic[bot]

Hi! We just realized that we haven't looked into this issue in a while. We're sorry!

We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

botelastic[bot] avatar Mar 05 '24 08:03 botelastic[bot]