Bug 39495 - World-readable logfiles: /var/log/memcache* /var/log/stunnel4/stunnel.log
World-readable logfiles: /var/log/memcache* /var/log/stunnel4/stunnel.log
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: SAML
UCS 4.1
Other Linux
: P5 normal (vote)
: UCS 4.1
Assigned To: Florian Best
Stefan Gohmann
: interim-2
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-10-07 16:12 CEST by Stefan Gohmann
Modified: 2015-11-17 12:12 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2015-10-07 16:12:16 CEST
01_base/26check_logfiles_general.test returns:
[2015-10-07 06:52:32.063908]Some potentially sensitive log files are world-readable:
[2015-10-07 06:52:32.065477]-rw-r--r-- 1 root     root        0 Okt  7 06:28 /var/log/memcached.log
[2015-10-07 06:52:32.065488]-rw-r--r-- 1 root     root        0 Okt  7 06:28 /var/log/memcached-saml.log
[2015-10-07 06:52:32.065500]-rw-r--r-- 1 stunnel4 stunnel4    0 Okt  7 06:27 /var/log/stunnel4/stunnel.log

See http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-0/job/Autotest%20MultiEnv/SambaVersion=s3,Systemrolle=master/52/testReport/01_base/26check_logfiles_general/test/
Comment 1 Florian Best univentionstaff 2015-10-13 12:10:14 CEST
Setting them to root:adm 0640 in postinst.

interim-bug, no changelog required.
Comment 2 Stefan Gohmann univentionstaff 2015-10-23 09:20:41 CEST
OK, looks better.
Comment 3 Stefan Gohmann univentionstaff 2015-11-17 12:12:20 CET
UCS 4.1 has been released:
 https://docs.software-univention.de/release-notes-4.1-0-en.html
 https://docs.software-univention.de/release-notes-4.1-0-de.html

If this error occurs again, please use "Clone This Bug".