I have various log files in folders on an RHEL 5 system:
/var/log/syslog-ng/A/ /var/log/syslog-ng/B/ /var/log/syslog-ng/C/
I would like to be able to give certain users the rights to view/tail (but not modify/delete) all files inside the folders
C (and subdirectories) but not to view the contents of folder
A nor the
/var/log/syslog-ng folder itself.
What I can imagine is a cut down shell with the only commands being
cd only able to navigate into the
A single user/password shared between the people who would be using this information is fine.
How would you recommend achieving this? Is it even possible?
(we currently achieve this with a bash script made available through Apache HTTPD, with the Apache configuration requiring a password if the path being navigated passes above the B or C folders. The script is clunky and hacky to say the least, and doesn't provide any form of live updating apart from a meta-refresh on the generated HTML page - making use of ssh and tail would be a much better user experience, and be less prone to errors)