Jammy SRU verification Reproducing the problems first: ubuntu@j-tomcat9-logging:~$ apt-cache policy tomcat9 tomcat9: Installed: 9.0.58-1 Candidate: 9.0.58-1 Version table: *** 9.0.58-1 500 500 http://br.archive.ubuntu.com/ubuntu jammy/universe amd64 Packages a) rsyslog complaints root@j-tomcat9-logging:~# grep -E "chown.*catalina\.out.*not permitted" /var/log/syslog Jul 27 13:41:48 j-tomcat9-logging rsyslogd: error during config processing: omfile: chown for file '/var/log/tomcat9/catalina.out' failed: Operation not permitted [v8.2112.0 try https://www.rsyslog.com/e/2207 ] b) logrotate fails root@j-tomcat9-logging:~# logrotate -f /etc/logrotate.conf error: error opening /var/log/tomcat9/catalina.out: Permission denied root@j-tomcat9-logging:~# ls -la /var/log/tomcat9 total 12 drwxrws--- 1 tomcat adm 188 Jul 27 13:41 . drwxrwxr-x 1 root syslog 538 Jul 27 13:43 .. -rw-r----- 1 tomcat adm 5995 Jul 27 13:41 catalina.2022-07-27.log -rw-r----- 1 syslog adm 3523 Jul 27 13:41 catalina.out -rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost.2022-07-27.log -rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost_access_log.2022-07-27.txt c) reinstall breaks logging again root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out -rw-r----- 1 syslog adm 3523 Jul 27 13:41 /var/log/tomcat9/catalina.out root@j-tomcat9-logging:~# apt install --reinstall tomcat9 -y (...) Preparing to unpack .../tomcat9_9.0.58-1_all.deb ... Unpacking tomcat9 (9.0.58-1) over (9.0.58-1) ... Setting up tomcat9 (9.0.58-1) ... Processing triggers for rsyslog (8.2112.0-2ubuntu2.2) ... (...) root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out -rw-r----- 1 tomcat adm 3523 Jul 27 13:41 /var/log/tomcat9/catalina.out # grep -E "catalina\.out.*Permission denied" /var/log/syslog Jul 27 13:43:59 j-tomcat9-logging rsyslogd: file '/var/log/tomcat9/catalina.out': open error: Permission denied [v8.2112.0 try https://www.rsyslog.com/e/2433 ] Jul 27 13:44:00 j-tomcat9-logging rsyslogd: file '/var/log/tomcat9/catalina.out': open error: Permission denied [v8.2112.0 try https://www.rsyslog.com/e/2433 ] Testing fixed version from proposed root@j-tomcat9-logging:~# apt-cache policy tomcat9 tomcat9: Installed: 9.0.58-1ubuntu0.1 Candidate: 9.0.58-1ubuntu0.1 Version table: *** 9.0.58-1ubuntu0.1 500 500 http://br.archive.ubuntu.com/ubuntu jammy-proposed/universe amd64 Packages a) rsyslog errors rsyslog is clean: root@j-tomcat9-logging:~# systemctl stop rsyslog.service syslog.socket root@j-tomcat9-logging:~# > /var/log/syslog root@j-tomcat9-logging:~# systemctl start rsyslog.service syslog.socket root@j-tomcat9-logging:~# grep rsyslogd /var/log/syslog Jul 27 13:49:24 j-tomcat9-logging rsyslogd: imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' (fd 3) from systemd. [v8.2112.0] Jul 27 13:49:24 j-tomcat9-logging rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Permission denied. Jul 27 13:49:24 j-tomcat9-logging rsyslogd: activation of module imklog failed [v8.2112.0 try https://www.rsyslog.com/e/2145 ] Jul 27 13:49:24 j-tomcat9-logging rsyslogd: rsyslogd's groupid changed to 111 Jul 27 13:49:24 j-tomcat9-logging rsyslogd: rsyslogd's userid changed to 104 Jul 27 13:49:24 j-tomcat9-logging rsyslogd: [origin software="rsyslogd" swVersion="8.2112.0" x-pid="6973" x-info="https://www.rsyslog.com"] start b) logrotate works, ownership and perms are preserved root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out -rw-r----- 1 syslog adm 7700 Jul 27 13:48 /var/log/tomcat9/catalina.out root@j-tomcat9-logging:~# logrotate -f /etc/logrotate.conf root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/ total 28 drwxrws--- 1 tomcat adm 216 Jul 27 13:50 . drwxrwxr-x 1 root syslog 586 Jul 27 13:50 .. -rw-r----- 1 tomcat adm 18982 Jul 27 13:48 catalina.2022-07-27.log -rw-r----- 1 syslog adm 0 Jul 27 13:50 catalina.out -rw-r----- 1 syslog adm 7700 Jul 27 13:50 catalina.out.1 -rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost.2022-07-27.log -rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost_access_log.2022-07-27.txt c) reinstall does not break logging/permissions/ownership of catalina.out: root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out -rw-r----- 1 syslog adm 0 Jul 27 13:50 /var/log/tomcat9/catalina.out root@j-tomcat9-logging:~# apt install tomcat9 -y --reinstall (...) Preparing to unpack .../tomcat9_9.0.58-1ubuntu0.1_all.deb ... Unpacking tomcat9 (9.0.58-1ubuntu0.1) over (9.0.58-1ubuntu0.1) ... Setting up tomcat9 (9.0.58-1ubuntu0.1) ... Processing triggers for rsyslog (8.2112.0-2ubuntu2.2) ... (...) root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out -rw-r----- 1 syslog adm 4177 Jul 27 13:51 /var/log/tomcat9/catalina.out jammy verification succeeded