Re: World readable log files

2000-09-25 Thread Dave Sherohman
Ethan Benson said: > it won't, apache does not use logrotate, your log permissions are > www-data.www-data mode 664 right now. (which is even worse since now > if someone cracks an apache child process they can tamper with your > logs) > > you need to edit /etc/cron.daily/apache to fix this. (t

Re: World readable log files

2000-09-25 Thread Ethan Benson
On Mon, Sep 25, 2000 at 10:13:47AM -0500, Dave Sherohman wrote: > I just did the following: > > chgrp adm /var/log/apache/* > chmod o-r /var/log/apache/* > /etc/init.d/apache restart > > and my install of apache now appears to be able to log properly without > requiring the logs to be world-read

Re: World readable log files

2000-09-25 Thread Dave Sherohman
Olaf Meeuwissen said: > The following are world readable on my rather spartan system: > > /var/log/apache/access.log* > /var/log/apache/error.log* If you have not already done so, I suggest that you file this as a bug. (If you don't know how, just install the 'bug' package and issue the comm