Bug 57299 - Public readable log file /var/log/freeradius/radius.log.1
Summary: Public readable log file /var/log/freeradius/radius.log.1
Status: NEW
Alias: None
Product: UCS
Classification: Unclassified
Component: Radius
Version: UCS 5.0
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: UCS maintainers
QA Contact: UCS maintainers
URL:
Keywords:
Depends on: 46263
Blocks:
  Show dependency treegraph
 
Reported: 2024-05-19 06:47 CEST by Philipp Hahn
Modified: 2024-05-19 06:47 CEST (History)
0 users

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 1: Cosmetic issue or missing function but workaround exists
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 1: Nuisance – not a big deal but noticeable
User Pain: 0.017
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2024-05-19 06:47:58 CEST
01_base/26check_logfiles_general

***Searching for world-readable logfiles:                                                                                                                                                                                                   
Some potentially sensitive log files are world-readable:                                                                                                                                                                                    
-rw-r--r-- 1 freerad freerad 2936 Mai 17 11:53 /var/log/freeradius/radius.log.1                                                                                                                                                             

# ls -ld / /var /var/log /var/log/freeradius /var/log/freeradius/*
drwxr-xr-x 18 root    root     4096 Mai 19 03:12 /
drwxr-xr-x 14 root    root     4096 Feb 23  2023 /var
drwxr-xr-x 14 root    root    12288 Mai 19 00:00 /var/log
drwxr-xr-x  2 freerad adm      4096 Mai 19 00:00 /var/log/freeradius
-rw-r--r--  1 freerad freerad 10105 Mai 19 05:55 /var/log/freeradius/radius.log
-rw-r--r--  1 freerad freerad 73833 Mai 19 00:00 /var/log/freeradius/radius.log.1
-rw-r--r--  1 freerad freerad   540 Mai 18 19:44 /var/log/freeradius/radius.log.2.gz
-rw-r--r--  1 freerad freerad   666 Mai 17 11:53 /var/log/freeradius/radius.log.3.gz
-rw-r--r--  1 freerad adm         0 Apr 27 09:08 /var/log/freeradius/radwtmp

```diff
--- /usr/share/ucs-test/01_base/26check_logfiles_general
+++q /usr/share/ucs-test/01_base/26check_logfiles_general
@@ -91,1 91,1 @@
-                -o -path "/var/log/freeradius/radius.log" \
+                -o -path "/var/log/freeradius/radius.log*" \
```