Restrict file access to append only

Question

I have a directory with log files and I'm putting logs from script launched by users into them. Logging with syslog isn't possible in this case.

I want the users to have only write permissions on log files. The problem is, that write permissions must be restricted, so that they can only append to that files. The underlying filesystem is XFS.

The following doesn't work:

# chattr +a test.log
chattr: Inappropriate ioctl for device while reading flags on test.log

Is there any other solution for this? Thank you for your hints.

Update:

The solution was:

# xfs_io
> open test.log
> chattr +a
> close

Sounds like a job for access control lists (ACLs). Search for this on google or SF. — slm, Dec 30 '12 at 14:59
[Also posted on Unix & Linux](http://unix.stackexchange.com/questions/59864/restrict-file-access-to-append-only). [Don't do this.](http://meta.stackexchange.com/questions/64068/is-it-possible-to-post-questions-across-a-couple-of-the-sites-because-its-debata/64073#64073) — Gilles 'SO- stop being evil', Dec 30 '12 at 23:33

Garfield Carneiro · Accepted Answer · 2012-12-30T17:00:09.687

2

AFAIK chattr only works on ext* (ext{2,3,4}) and some other specific filesystems. The xfs_io man page does mention chattr though.

edited Dec 30 '12 at 17:00

answered Dec 30 '12 at 16:19

Garfield Carneiro

101
4

Actually, this worked out pretty well for me. Thank you. I had to open files through xfs_io and then used chattr command on them. – metalhead Dec 30 '12 at 17:30

Restrict file access to append only

1 Answers1