Giving users access to logs only

[domjag]

SYSTEM INFORMATION
OS type and version	Rocky Linux 8.10
Webmin version	2.202
Virtualmin version	7.30.4
Webserver version	Apache
Related packages	SUGGESTED

I have a specific user for a specific Virtual server that I would like to give log access to (php error logs, access logs). They should not have access to anything else except logs. Is this possible and if so what is the best appoach for this. For example, can I apply a server template to a user - I don’t think you can.

[jimr1]

@domjag

I have a specific user for a specific Virtual server that I would like to give log access to (php error logs, access logs)

virtualmin seems to do that out of the box, login as the domain owner or use

and go to

[domjag]

Hi jimr1,

Yes I am aware that you can access the logs but my requirement is to give access to a specific user access to the logs BUT nothing else - basically I want to restrict ALL functions EXCEPT logs for this user.

[Ilia]

Yes, this is possible.

1. Go to “Webmin → Webmin Users” and create a new privileged user with access only to the “System Logs” module.
2. After creating the user, click on their name and configure “System Logs” module ACLs.
3. Deny everything by default, then allow access only to the specific log files you want, e.g.:
   
   

[domjag]

Tried as you suggested.

This user has access to SystemLogs and modified the ACL like so:

But when I log in as logaccess user I get the following error:

[jimr1]

Why did you add this to the virtualmin topic area when you are a webmin user ? This can confuse the answers you get

[Ilia]

@domjag

But when I log in as logaccess user I get the following error:

Try “System Logs RS” module instead.

[domjag]

Hi Ilia

Doesn’t work either:

The syslog configuration file /etc/rsyslog.conf was not found on your system. Maybe syslog is not installed, or a newer version like syslog-ng is in use, or the module configuration is incorrect.

When I set the specific log file like so:

I get:

If I set the “Can view and configure Log files” to All I do get the syslogs for all the sites. I only want the user to see the logs for devnet2023 - do I have to add this loguser to my vs - not sure how to set up the permissions correctly?

[domjag]

OK, finally got it needed to play around with the ACL a bit but it works.

My ACL looks like this

and now it looks correct:

Thanks for your help!