On Sat, 2 Jun 2012 18:10:51 -0500
"Christofer C. Bell" <christofer.c.b...@gmail.com> wrote:

> On Sat, Jun 2, 2012 at 2:17 PM, Titanus Eramius <tita...@aptget.dk>
> wrote:
> > Hi list
> >
> > Last week i ran into the very restrictive folder permissions of the
> > apache2 log dir. They where "drwxr-x--- root adm" but I changed them
> > to "rwxr-xr-x root adm" so a unprivileged user may opdate
> > webalizer[1] at night.
> >
> > That got me thinking (which I generally don't like...), does anyone
> > know why the permissions are so strict, and is there a risk in the
> > change I've made beside that everybody now may read the logs?
> >
> > The answer seems to elude me.
> 
> The answer eludes you because... that's it!  There's no other risk to
> what you've done.  That said, I went the other way and stuck my user
> account in the adm group so I could read logs.
> 

Well, for some reason I am kind of disappointed. Next time around I
guess I'll put the user in adm too, so thanks for the tip and thanks
for the answer. Tit


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120603104308.7d5a2...@asrock.local.aptget.dk

Reply via email to