GNU bug report logs

#57701 Rotated logs has insecure file permissions

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Reported by semente <semente@posteo.net>
Date 2022-09-09T15:14:01
Severity important
Tags security
Merged with

Reply or subscribe to this bug. View this bug as an mbox, status mbox, or maintainer mbox

Report forwarded to bug-guix@gnu.org:
bug#57701; Package guix. (Fri, 09 Sep 2022 15:14:01 GMT) (full text, mbox, link).

Acknowledgement sent to semente <semente@posteo.net>:
New bug report received and forwarded. Copy sent to bug-guix@gnu.org. (Fri, 09 Sep 2022 15:14:01 GMT) (full text, mbox, link).

Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

Rotated logs has different file permissions to the original log files.

For example the log file /var/log/secure:

-rw-r----- 1 root root  secure
-rw-r--r-- 1 root root  secure.1.gz

Added tag(s) security. Request was from Ludovic Courtès <ludo@gnu.org> to control@debbugs.gnu.org. (Fri, 21 Oct 2022 10:17:01 GMT) (full text, mbox, link).

Severity set to 'important' from 'normal' Request was from Ludovic Courtès <ludo@gnu.org> to control@debbugs.gnu.org. (Fri, 21 Oct 2022 10:17:02 GMT) (full text, mbox, link).

Merged 57701 64562. Request was from Maxim Cournoyer <maxim.cournoyer@gmail.com> to control@debbugs.gnu.org. (Tue, 12 Nov 2024 13:03:02 GMT) (full text, mbox, link).

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 05:33:57 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.