From owner-freebsd-jail@FreeBSD.ORG  Thu Jun 19 16:50:59 2008
Return-Path: <owner-freebsd-jail@FreeBSD.ORG>
Delivered-To: freebsd-jail@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5B4E3106567A
	for <freebsd-jail@freebsd.org>; Thu, 19 Jun 2008 16:50:59 +0000 (UTC)
	(envelope-from albinootje@gmail.com)
Received: from yx-out-2324.google.com (yx-out-2324.google.com [74.125.44.30])
	by mx1.freebsd.org (Postfix) with ESMTP id F097E8FC1E
	for <freebsd-jail@freebsd.org>; Thu, 19 Jun 2008 16:50:58 +0000 (UTC)
	(envelope-from albinootje@gmail.com)
Received: by yx-out-2324.google.com with SMTP id 31so143248yxl.13
	for <freebsd-jail@freebsd.org>; Thu, 19 Jun 2008 09:50:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from
	:user-agent:mime-version:to:cc:subject:references:in-reply-to
	:content-type:content-transfer-encoding;
	bh=g4oYoJsjRRAcOS7LM23pZgAZil+Q062fOP7YzDaNIZo=;
	b=G/rmC1tHdUVczFCJ/gVn74hLzViK3PDF0FntQfi/Ia/HsWOG3hUpNM58yfP+weZz/W
	9Mo5apE31JfEyl6pnJOIVfh2G0Y0HuZ/vWYmHPN7Fl0bfennne/7rJY3GLKVfKyvYEif
	s9ooCWBb9M+QbNgHQeK5hNTKDn+sirdvOhdVA=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:user-agent:mime-version:to:cc:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	b=UtGwTsHEDI5IREGquY6er7F6HDYZsYDs6hBGz1cg8hcuDo/uXXxFfgj7vFAzUPJKfH
	gDn8XZo6OYT99i/mgMtS5fo96qFHWhgMQfMaqwNIkkl44KBAgQ1SHgSoAecmOAHNE0zS
	3lF60UBl1xbcZPhpr2QhwzNPcD9XqOhqH0F0Q=
Received: by 10.115.49.11 with SMTP id b11mr2864806wak.117.1213892533232;
	Thu, 19 Jun 2008 09:22:13 -0700 (PDT)
Received: from ?192.168.0.178? ( [217.19.30.147])
	by mx.google.com with ESMTPS id l22sm1008010wrl.23.2008.06.19.09.22.11
	(version=TLSv1/SSLv3 cipher=RC4-MD5);
	Thu, 19 Jun 2008 09:22:12 -0700 (PDT)
Message-ID: <485A87B1.7020509@gmail.com>
Date: Thu, 19 Jun 2008 18:22:09 +0200
From: albinootje <albinootje@gmail.com>
User-Agent: Thunderbird 2.0.0.14 (X11/20080502)
MIME-Version: 1.0
To: Albert.Shih@obspm.fr
References: <20080619154704.GA89585@pcjas.obspm.fr>
In-Reply-To: <20080619154704.GA89585@pcjas.obspm.fr>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: freebsd-jail@FreeBSD.org
Subject: Re: Acces to apache log.
X-BeenThere: freebsd-jail@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Discussion about FreeBSD jail\(8\)" <freebsd-jail.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
	<mailto:freebsd-jail-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-jail>
List-Post: <mailto:freebsd-jail@freebsd.org>
List-Help: <mailto:freebsd-jail-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
	<mailto:freebsd-jail-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jun 2008 16:50:59 -0000

Albert Shih wrote:

Hi,

> I'm using FreeBSD with jail. On those jail I'm running apache and tomcat
> (not apache/tomcat, but apache and tomcat not in same jail of course).
> 
> Now my user (developper team) want to have access to tomcat log and apache
> log for debugging.
> 
> I really prefer to not grant ssh access to my developper (the code is push
> with subversion). 
> 
> How can I do that ? Make the acces to apache-log and tomcat-log (or anything log)
> to my users ? 

If I was in the same situation i would make another jail just to provide
the log-files
with read-only "nullfs" mounts for that person.

Or use for that user scponly with chroot option as shell, which is a
little bit more work,
and then again use nullfs to mount the logfile directories for that user.

Good luck!

Kind regards,
Albi.