I'm wondering what the best practice is for viewing the logs/files of a service named webapp. This webapp operates under its own user and group, and so all of the files it needs are owned by webapp:webapp.
If I ssh into my server, I need to sudo if I want to tail the logs (since they are not world-readable), and I want to avoid this.
Should I change the group on these log files to wheel or something else I'm a part of, or should I just grant my user membership in the webapp group? Or something else?