GNU bug report logs

#40405 System log files are world readable

PackageSource(s)Maintainer(s)
guix PTS Buildd Popcon
Full log

Message #8 received at 40405@debbugs.gnu.org (full text, mbox, reply):

Received: (at 40405) by debbugs.gnu.org; 3 Apr 2020 13:34:27 +0000
From debbugs-submit-bounces@debbugs.gnu.org Fri Apr 03 09:34:27 2020
Received: from localhost ([127.0.0.1]:41416 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1jKMSp-0000TA-Kw
	for submit@debbugs.gnu.org; Fri, 03 Apr 2020 09:34:27 -0400
Received: from mout02.posteo.de ([185.67.36.66]:51079)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <dnbarbato@posteo.de>) id 1jKMSm-0000Sf-Th
 for 40405@debbugs.gnu.org; Fri, 03 Apr 2020 09:34:25 -0400
Received: from submission (posteo.de [89.146.220.130]) 
 by mout02.posteo.de (Postfix) with ESMTPS id 84EF02400FB
 for <40405@debbugs.gnu.org>; Fri,  3 Apr 2020 15:34:18 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017;
 t=1585920858; bh=f7Vp5cCMlT7hewscKncbMlWQ6hSh2LM4qF9E9R0mPVM=;
 h=From:To:Subject:Date:From;
 b=OxUZl7Cz4AvzusDM7MCpIzF/92PcK/k5YNnTEWONkWIWrqjjKdVn0ARMlR9x6Mmi8
 IsXLv2zKlskSxWlo+3NhJjpOPHwSi4sMOGIQMLcHtNwdhIse9GCqdtYLd5dt1fttPh
 ifk0mifZw/UjjSfHgI1Hgd1W5EeAQwy6BHUfGcMIakX0WwA+wbeUR6b55218flphL0
 M8qRzrDC2Z0SrqqD6SBvyf3NW3G9he0bGKhLf80FF3W3n9Gx58SKkUxuuabkTIjiCv
 WI1bVG9XMm/8bQlnBGPRaHOyYQRUExWelpvDappXxcY5XLzue+kvR0I5WoNLuQOHKT
 aMuvVA3qNxfQw==
Received: from customer (localhost [127.0.0.1])
 by submission (posteo.de) with ESMTPSA id 48v1B15lDyz9rxS
 for <40405@debbugs.gnu.org>; Fri,  3 Apr 2020 15:34:17 +0200 (CEST)
From: Diego Nicola Barbato <dnbarbato@posteo.de>
To: 40405@debbugs.gnu.org
Subject: Re: bug#40405: System log files are world readable
References: <87v9mg1zbt.fsf@GlaDOS.home>
Date: Fri, 03 Apr 2020 15:34:17 +0200
In-Reply-To: <87v9mg1zbt.fsf@GlaDOS.home> (Diego Nicola Barbato's message of
 "Fri, 03 Apr 2020 15:19:34 +0200")
Message-ID: <87r1x41yna.fsf@GlaDOS.home>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 40405
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -3.3 (---)
Diego Nicola Barbato <dnbarbato@posteo.de> writes:

> Hey Guix,
>
> On Guix System the log files (in /var/log) generated by syslogd are
> currently (commit 151f3d4) world readable.  They should probably only be
> readable by root (for the same reason that dmesg can only be run by
> root).
>
> It isn't possible to set the umask with fork-exec-constructor, is it?
                                          ^^^^^^^^^^^^^^^^^^^^^
That should be 'make-forkexec-constructor'.  Sorry for the noise.

> Otherwise that might have been a simple solution.
>
> Regards,
>
> Diego




Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 11:18:48 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.