Reading System Logs
Another security irritant is reading system logs. Home users and many small business users do not need anal security with respect to reading logs. On such systems there are no clever or deep hidden secrets.
During booting I use a simple script in
rc.local to ensure I can read my logs without root privileges. The script does nothing more than run
chmod 644 on the following logs:
critical* cron* debug* dmesg dnsmasq* emergency* errors* faillog* kernel* lastlog* mail.* messages* pm-powersave.log pm-suspend.log rkhunter.log* rsnapshot* smartd* spooler* sshd* syslog* vboxweb/* vnstat.log*