RSYSLOG doesn't properly enforce file creation mode on CentOS

[Simon Pasquier]

Environment: Fuel 6.0/CentOS (Ubuntu deployments not affected).

The files created by RSYSLOG don't have the expected permissions. As per configuration [1], it should be 0640 but in practice, it is 0600.

# ls -lart /var/log | tail
-rw------- 1 root adm 350162 Feb 26 13:45 user.log
-rw------- 1 root adm 331940 Feb 26 13:45 syslog
-rw-r--r-- 1 root root 108680 Feb 26 13:45 nailgun-agent.log
-rw------- 1 root adm 280435 Feb 26 13:45 glance-all.log
-rw------- 1 root adm 392592 Feb 26 13:45 nova-all.log
-rw------- 1 root adm 301429 Feb 26 13:45 keystone-all.log
-rw------- 1 root adm 429508 Feb 26 13:45 cinder-all.log
-rw-------. 1 root root 643551 Feb 26 13:45 messages
-rw------- 1 root adm 232350 Feb 26 13:45 daemon.log
-rw------- 1 root adm 593830 Feb 26 13:45 sudo.log

As discussed on the RSYSLOG mailing list [2], adding "$umask 0000" to /etc/rsyslog.conf fixes the issue.

[1] https://github.com/stackforge/fuel-library/blob/stable/6.0/deployment/puppet/rsyslog/templates/rsyslog.conf.erb#L20
[1] http://lists.adiscon.net/pipermail/rsyslog/2013-June/032751.html

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/161139

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/161139
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=0c752c9995b80b8ae5ff77965b709d4bbe906495
Submitter: Jenkins
Branch: master

commit 0c752c9995b80b8ae5ff77965b709d4bbe906495
Author: Bartłomiej Piotrowski <email address hidden>
Date: Wed Mar 4 09:56:39 2015 +0100

    Ensure files created by rsyslog have correct permissions

    By default, rsyslog assumes umask 0022, resulting in wrong permissions
    for files.

    Change-Id: Idec555bc2a3d7f0e83c3e6f59d90e965dd0cdce4
    Closes-Bug: 1425954