Permissions for /var/ossec/var/multigroups

[vcerenu]

Description

The /var/ossec/var/multigroups directory has different permissions inside the Wazuh manager container than the version installed by RPM or DEB packages.
Currently it has a Docker volume mounted which takes the following permissions:

bash-5.2# ls -ltr /var/ossec/var/ | grep multigroups
drwxr-xr-x 2 root root 4096 Oct 29 12:34 multigroups
bash-5.2#

The permissions it has in a package installation are the following:

root@ip-172-31-44-45:~# ls -ltr /var/ossec/var/ | grep multigroups
drwxrwx--- 2 wazuh wazuh 4096 Oct 15 16:51 multigroups
root@ip-172-31-44-45:~#

Also, if the image is booted without volume, the directory does not exist.

This is causing the following errors:

2024/10/29 12:27:25 wazuh-remoted: ERROR: Cannot create multigroup directory 'var/multigroups/31ec2eac': Permission denied (13)
2024/10/29 12:27:35 wazuh-remoted: ERROR: Cannot create multigroup directory 'var/multigroups/31ec2eac': Permission denied (13)

[vcerenu]

I have been testing image builds by modifying the build-images.yml file and the multigroups directory still does not appear.
The investigation continues

[vcerenu]

Update

The error is generated due to the file handling that is performed for data persistence, I am investigating the operation of the scripts and the root cause of the failure.