= Description of problem: When logrotate rotates the log files, it removes ACLs. This should not happen; ACLs should be preserved. = Version-Release number of selected component (if applicable): logrotate-3.7.9-1.fc14.i686 Linux 2.6.35.10-74.fc14.i686.PAE i686 = How reproducible: Fully reproducible. = Steps to Reproduce: 1. setfacl -m user:yourlogin:r-- /var/log/messages (grant read access) 2. getfacl /var/log/messages && ls -la /var/log/messages* 3. run logrotate (either manually, or wait for it ...) 4. repeat command from step 2 to see that ACL have been reset. = Actual results: (1) ACLs are reset, not preserved. (2) The pre-set ACL are transferred to the archive file (cf. output of ls -la /var/log/messages* ). = Expected results: (1) ACLs _must_ be preserved at least for the actual file (/var/log/messages). (2) ACLs _might_ be preserved for the archive files.
Hi, I've added ACLs support in this upstream commit: https://fedorahosted.org/logrotate/changeset/299 . I will backport it to rawhide soon to test it more. ACLs of log files created by logrotate should be preserved. Old log files (the rotated ones) should have ACLs set according to original log file. Compressed logs (.gz files) should have ACLs set according to original uncompressed log.
I've backported mentioned patch into logrotate-3.7.9-5.fc15 in rawhide.