Rotated logs has insecure file permissions

  • Open
  • quality assurance status badge
Details
2 participants
  • Ludovic Courtès
  • semente
Owner
unassigned
Submitted by
semente
Severity
important
S
S
semente wrote on 9 Sep 2022 13:31
Download
(name . Guix Bug Reports)(address . bug-guix@gnu.org)
513050f2-2631-474b-9a31-8f9aa945dead@www.fastmail.com
Download
Rotated logs has different file permissions to the original log files.

For example the log file /var/log/secure:

-rw-r----- 1 root root secure
-rw-r--r-- 1 root root secure.1.gz
L
L
Ludovic Courtès wrote on 21 Oct 2022 12:16
Download
control message for bug #57701
(address . control@debbugs.gnu.org)
8735bh8ota.fsf@gnu.org
Download
tags 57701 + security
quit
L
?