Bug#568641: ntop: access.log is writeable by everyone

2010-02-10 Thread Ola Lundqvist
Hi On Tue, Feb 09, 2010 at 09:25:44PM +0100, J.M.Roth wrote: > On 2/9/2010 9:13 PM, Ola Lundqvist wrote: > > >> When setting the correct permissions (u=rx,g=rxs,o= with ownership > >> ntop:ntop) on the directory, the permissions will always be ok: > >> - the directory will not be accessible by an

Bug#568641: ntop: access.log is writeable by everyone

2010-02-09 Thread Ola Lundqvist
Hi On Tue, Feb 09, 2010 at 10:52:51AM +0100, J.M.Roth wrote: > On 2/9/2010 8:45 AM, Ola Lundqvist wrote: > > On Mon, Feb 08, 2010 at 11:24:52PM +0100, J.M.Roth wrote: > >> On 2/8/2010 11:13 PM, Ola Lundqvist wrote: > drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . > drwxr-xr-x 12 root ro

Bug#568641: ntop: access.log is writeable by everyone

2010-02-09 Thread J.M.Roth
On 2/9/2010 9:13 PM, Ola Lundqvist wrote: >> When setting the correct permissions (u=rx,g=rxs,o= with ownership >> ntop:ntop) on the directory, the permissions will always be ok: >> - the directory will not be accessible by anyone else than ntop, >> - the contained files will have appropriate righ

Bug#568641: ntop: access.log is writeable by everyone

2010-02-09 Thread J.M.Roth
On 2/9/2010 8:45 AM, Ola Lundqvist wrote: > On Mon, Feb 08, 2010 at 11:24:52PM +0100, J.M.Roth wrote: >> On 2/8/2010 11:13 PM, Ola Lundqvist wrote: drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . drwxr-xr-x 12 root root 4096 2010-01-27 11:17 .. -rw-rw-rw- 1 root root0 2010-01-27

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread Ola Lundqvist
Hi On Mon, Feb 08, 2010 at 11:24:52PM +0100, J.M.Roth wrote: > On 2/8/2010 11:13 PM, Ola Lundqvist wrote: > >> drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . > >> drwxr-xr-x 12 root root 4096 2010-01-27 11:17 .. > >> -rw-rw-rw- 1 root root0 2010-01-27 11:18 access.log > > > > Not good. Howe

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread J.M.Roth
On 2/8/2010 11:13 PM, Ola Lundqvist wrote: >> drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . >> drwxr-xr-x 12 root root 4096 2010-01-27 11:17 .. >> -rw-rw-rw- 1 root root0 2010-01-27 11:18 access.log > > Not good. However I do not think postinst is good enough. We must change > the umask ins

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread Ola Lundqvist
Hi On Mon, Feb 08, 2010 at 11:02:49AM +0100, J.M.Roth wrote: > On 2/8/2010 7:54 AM, Ola Lundqvist wrote: > >> /var/log/access.log is writeable by everyone. The following would fix that: > > > > The file or the directory? > > > > My file has the following permission: > > drwxr-xr-x 2 ntop root

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread J.M.Roth
On 2/8/2010 7:54 AM, Ola Lundqvist wrote: >> /var/log/access.log is writeable by everyone. The following would fix that: > > The file or the directory? > > My file has the following permission: > drwxr-xr-x 2 ntop root 89 May 10 2009 . > drwxr-xr-x 15 root root4096 Feb 8 01:21 .. > -r

Bug#568641: ntop: access.log is writeable by everyone

2010-02-07 Thread Ola Lundqvist
Hi On Sat, Feb 06, 2010 at 02:11:25PM +0100, J.M.Roth wrote: > Package: ntop > Version: 3:3.3-11+b2 > Severity: normal > Tags: patch, security > > > /var/log/access.log is writeable by everyone. The following would fix that: The file or the directory? My file has the following permission: drwx

Bug#568641: ntop: access.log is writeable by everyone

2010-02-06 Thread J.M.Roth
Package: ntop Version: 3:3.3-11+b2 Severity: normal Tags: patch, security /var/log/access.log is writeable by everyone. The following would fix that: --- postinst2008-08-06 17:55:17.0 +0200 +++ postinst.new2010-02-06 14:07:59.0 +0100 @@ -35,14 +35,17 @@ addus