I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg.
/var/log/messages) for debugging purposes.
This is explicitly local log data, not remote syslog, logstash, etc. Obviously, there's several ways to address this issue. What I'd like to know is if there is a fairly "standardized" way to solve this issue.
Typically, I solve this problem with sudo but either POSIX groups or
acls is attractive as it's few chars for the users to type and it removes entries from the sudo log. However, I don't believe I've ever seen that done before. What is your experience? How do large install base sites address this?