precheck log file permission

Author: GMHDBJD

log.go

@@ -18,6 +18,7 @@ import (
 	"errors"
 	"fmt"
 	"os"
+	"path/filepath"
 	"sync"
 	"sync/atomic"
 	"time"
@@ -174,12 +175,42 @@ func (s *lockWithTimeoutWrapper) Sync() error {
 
 // initFileLog initializes file based logging options.
 func initFileLog(cfg *FileLogConfig) (*lumberjack.Logger, error) {
+	// Verify file permissions early to prevent silent failures.
+	// Since lumberjack creates log files lazily, permission issues wouldn't be detected
+	// until the first write attempt. This is problematic when tools redirect their
+	// error output to these log files.
+	// e.g. dumpling use the log file as ErrorOutputPath, but the log file will not be created
+	// if there has permission issues, and dumpling will not print any error message.
+
+	// Create the directory if it doesn't exist
+	dir := filepath.Dir(cfg.Filename)
+	if err := os.MkdirAll(dir, 0755); err != nil {
+		return nil, fmt.Errorf("cannot create log directory: %v", err)
+	}
+
+	// Check if the path is a directory which is invalid
 	if st, err := os.Stat(cfg.Filename); err == nil {
 		if st.IsDir() {
 			return nil, errors.New("can't use directory as log file name")
 		}
-	} else if !os.IsNotExist(err) {
-		return nil, err
+
+		// Check if the file is writable
+		file, err := os.OpenFile(cfg.Filename, os.O_WRONLY|os.O_APPEND, 0666)
+		if err != nil {
+			return nil, fmt.Errorf("can't write to log file: %v", err)
+		}
+		file.Close()
+	} else if os.IsNotExist(err) {
+		// File doesn't exist, verify we can create it
+		file, err := os.Create(cfg.Filename)
+		if err != nil {
+			return nil, fmt.Errorf("can't create log file: %v", err)
+		}
+		file.Close()
+		// Remove the empty file since lumberjack will create it
+		os.Remove(cfg.Filename)
+	} else {
+		return nil, fmt.Errorf("error checking log file: %v", err)
 	}
 
 	if cfg.MaxSize == 0 {

zap_log_test.go

@@ -19,6 +19,7 @@ import (
 	"math"
 	"net"
 	"os"
+	"path/filepath"
 	"strings"
 	"testing"
 	"time"
@@ -288,23 +289,73 @@ func TestCompressError(t *testing.T) {
 }
 
 func TestLogFileNoPermission(t *testing.T) {
-	tempDir, _ := os.MkdirTemp("/tmp", "tests-log")
-	defer os.RemoveAll(tempDir)
+	tempDir := t.TempDir()
+
+	// Directory permission denied
+	dirPath := filepath.Join(tempDir, "noperm-dir")
+	require.NoError(t, os.Mkdir(dirPath, 0755))
 	conf := &Config{
 		Level: "info",
 		File: FileLogConfig{
-			Filename: tempDir + "/test.log",
+			Filename: filepath.Join(dirPath, "test.log"),
 			MaxSize:  1,
 		},
 	}
 	_, _, err := InitLogger(conf)
 	require.NoError(t, err)
+	require.NoError(t, os.Chmod(dirPath, 0))
+	_, _, err = InitLogger(conf)
+	require.Contains(t, err.Error(), "permission denied")
+	require.NoError(t, os.Chmod(dirPath, 0755))
+
+	// Directory exists but doesn't allow file creation
+	readOnlyDirPath := filepath.Join(tempDir, "readonly-dir")
+	require.NoError(t, os.Mkdir(readOnlyDirPath, 0755))
+	require.NoError(t, os.Chmod(readOnlyDirPath, 0555)) // Read-only directory
+	conf = &Config{
+		Level: "info",
+		File: FileLogConfig{
+			Filename: filepath.Join(readOnlyDirPath, "test.log"),
+			MaxSize:  1,
+		},
+	}
+	_, _, err = InitLogger(conf)
+	require.Contains(t, err.Error(), "permission denied")
+	require.NoError(t, os.Chmod(readOnlyDirPath, 0755))
+
+	// Using a directory as log file
+	dirLogPath := filepath.Join(tempDir, "dir-as-log")
+	require.NoError(t, os.Mkdir(dirLogPath, 0755))
+	conf = &Config{
+		Level: "info",
+		File: FileLogConfig{
+			Filename: dirLogPath,
+			MaxSize:  1,
+		},
+	}
+	_, _, err = InitLogger(conf)
+	require.Contains(t, err.Error(), "can't use directory as log file name")
 
-	err = os.Chmod(tempDir, 0)
+	// File exists but is not writable
+	filePath := filepath.Join(tempDir, "readonly.log")
+	file, err := os.Create(filePath)
 	require.NoError(t, err)
+	file.Close()
+	require.NoError(t, os.Chmod(filePath, 0444))
 
+	// Ensure parent directory is created successfully
+	nestedPath := filepath.Join(tempDir, "nested/path/to")
+	conf = &Config{
+		Level: "info",
+		File: FileLogConfig{
+			Filename: filepath.Join(nestedPath, "test.log"),
+			MaxSize:  1,
+		},
+	}
 	_, _, err = InitLogger(conf)
-	require.Contains(t, err.Error(), "permission denied")
+	require.NoError(t, err)
+	_, err = os.Stat(nestedPath)
+	require.NoError(t, err)
 }
 
 // testLogSpy is a testing.TB that captures logged messages.