server wide issue with wflogs permissions

  • Resolved matbar20

    (@matbar20)


    6 years, 4 months ago

    I’ve just noticed that on one of my servers, the fire wall has not been able to update rules.php in wflogs/ directory. Everything used to work fine. Not sure when exactly problem began. I have multiple servers hosting multiple wordpress installations each. Only one server seems affected. The wflogs directorys are owned by the nginx server process. Diagnostics shows every thing is green and Okay. What could be the problem? I’ve already tried deleting and regenerating wflogs folder for each site, but same error occurs. When I try to manually update firewall rules, I get this error: “No rules were updated. Please verify you have permissions to write to the /wp-content/wflogs directory.”

    Please Help! Wordfence version 7.1.17

Viewing 4 replies - 1 through 4 (of 4 total)

  • Hi @matbar20,

    The process that runs cronjobs and your PHP process are running under different users – with may have different permissions.

    (That explains how diagnostics may show green, but a scan run from a cronjob will not be able to access your logs folder)

    Can I have you check what permissions are set for /wflogs? (For example, 640)

    Dave

    Thread Starter matbar20

    (@matbar20)

    Hi Dave,

    Thanks for your reply. I’m feeling a little dumb, but I finally found the cause of my issue. I had curl_exec() function disabled in my fpm php.ini file. I must have made that change at least half a year ago, trying to secure the php process, and just never noticed that it had an adverse effect on the firewall till today. Sorry to bother you with my ignorance. Should have combed the errorlog a little closer before posting!

    Hey no worries, and thanks for posting how you managed to solve it!

    It’ll definitely help future users if a similar issue pops up again.

    Dave

    Hi all,

    I have almost same kind of problem.

    It starts with “config-synced.php” changed owner:group to www:www.

    After a few minutes, config-livewaf.php,config.php,config-synced.php,config-transient.php,template.php all do the same and they have rw——- and a message appears in Wordfence saying it can not read.

    When I change the owner:group and rw-rw—- the firewall goes to learning mode.

    This started about 1 month ago.

    Michel-André

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘server wide issue with wflogs permissions’ is closed to new replies.