无法使用替换用户运行logrotate postscripts命令

Question

当使用替换用户运行postscripts命令时，RHEL7上的logrotate(3.8.6)给我提供PAM身份验证拒绝。

logrotate配置

/var/log/rabbitmq/*.log {
    su rabbitmq rabbitmq
        daily
        dateext
        dateyesterday
        missingok
        rotate 7
        compress
        delaycompress
        notifempty
        sharedscripts
        postrotate
          su rabbitmq -s /bin/sh "echo"-c
        endscript
      }

/var/log/secure中的内容

May  3 22:57:01 ip-10-6-78-5 su: pam_unix(su:auth): auth could not identify password for [rabbitmq]
May  3 22:57:01 ip-10-6-78-5 su: pam_unix(su:auth): auth could not identify password for [rabbitmq]
May  3 22:57:01 ip-10-6-78-5 su: pam_succeed_if(su:auth): requirement "uid >= 1000" not met by user "rabbitmq"
May  3 22:57:01 ip-10-6-78-5 su: pam_succeed_if(su:auth): requirement "uid >= 1000" not met by user "rabbitmq"
May  3 22:57:01 ip-10-6-78-5 su: FAILED SU (to rabbitmq) root on none
May  3

Answer 1

您是否可以尝试在su之前添加sudo，并为su命令使用-c参数，这样您的命令应该如下所示：sudo su rabbitmq -c '/bin/sh "echo"-c'