svlogd and umask settings

[Vincent Danen <vdanen@linsec.ca>]

[-- Attachment #1: Type: text/plain, Size: 1241 bytes --]

I have an issue with svlogd where I need it to write files with 0640
perms, but it wants to write with 0644 perms.  I tried to toss a umask
call in my runscript:

[root@ares apparmor.d]# cat /service/auditd/log/run 
#!/bin/execlineb

# logging for the auditd service; unfortunately we need to run as root here
# so that genprof will look at our log

/bin/foreground { /usr/bin/install -m 0700 -d -o root -g root
/var/log/system/audit }
/bin/cd /var/log/service
/bin/umask 026
/sbin/svlogd /var/log/system/audit

This doesn't seem to make a difference to svlogd.  Looking in the
manpage, I didn't see anything about changing the permissions of files
it creates.  But even with the above I get:

[root@ares apparmor.d]# ls -l /var/log/system/audit/
total 0
-rw-r--r--  1 root root 0 Aug 30 16:17 current
-rw-------  1 root root 0 Aug 30 16:17 lock

What am I missing or do I have to change something in svlogd itself?
Since Annvix is now using socklog by default, I need to make sure logs
are 0640.  The directory permissions are correct, but the log file
permissions are not.

-- 
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}
mysql> SELECT * FROM users WHERE clue > 0;
Empty set (0.00sec)

[-- Attachment #2: Type: application/pgp-signature, Size: 186 bytes --]