Package: awstats
Version: 6.3-1
Severity: normal

Currently if CreateDirDataIfNotExists is set, DirData is created with
the line:

   my $mkdirok=mkdir "$DirData", 0766;

0766 permissions are not necessary. 0755 would be more appropriate.

First of all, on a Debian installation it is not desirable to make data
directories world writable.

Second, inasmuch as the permissions and ownership of /var/lib/awstats
can control access to the data directories, there is not reason not to
provide read and execute permissions on the data directories, making
them readable by all who /var/lib/awstats allow in.

Charles

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (90, 'testing'), (80, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.26-1um
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages awstats depends on:
ii  perl [libstorable-perl]       5.8.4-6    Larry Wall's Practical Extraction 

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to