Ian Zimmerman wrote:
> Package: lpr
> Version: 1:2006.08.03
> Severity: normal
> 
> 
> /etc/cron.weekly/lpr:
> 
> savelog -u lp -n -q -t /var/log/lp-acct
> savelog -n -q -t /var/log/lp-errs
> 
> The second line seems to result in a world-readable lp-errs.* after
> rotation.

I guess I may specify a mode for these files :)

But AFAIK, this is not really a security hole. It is just a log of what
filters dump to stderr. From manpage,

"Messages printed on stderr of one of the filters are sent to the
corresponding lf file", where lf is the /var/log/lp-errs by default.

But I'll fix it. Thanks for letting me know.

- Adam


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to