Good morning all

I have centos obsidian installed

i also have imunify360 installed with ossec

im getting daily log rotate errors

/etc/cron.daily/logrotate:

error: stat of /var/ossec/logs/active-responses.log failed: Permission denied
error: stat of /var/ossec/logs/ossec.log failed: Permission denied

folder permissions are as follows

/var/ossec root ossec 550

/var/ossec/logs ossec ossec 770

/var/ossec/logs/active-response.log ossec ossec 664
/var/ossec/logs/ossec.log ossec ossec 664


This is the content of the file responsible for the rotation which is /etc/logrotate.d/ossec-hids


/var/ossec/logs/active-responses.log {
missingok
notifempty
create 0664 ossec ossec
su ossec ossec

}

/var/ossec/logs/ossec.log {
missingok
notifempty
create 0664 ossec ossec
su ossec ossec

}

if i change su ossec ossec to root root the rotation happens but i still receive the permission denied error every day via email

does anyone know why this is happening and how to solve this