According to ls it is mounted 755, that is what was confusing me:

reiner@weather:/var$ ls -ld /var/log
drwxr-xr-x 13 root root 4096 Feb 22 06:25 /var/log

Thats why I think the error message is wrong. Am I missing something?


Am 22.02.2014 13:09, schrieb Paul Martin:
On Sat, Feb 22, 2014 at 08:35:51AM +0100, Reiner Buehl wrote:

error: skipping "/var/log/cron.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

This is correct and secure behaviour.  It prevents a possible symlink
attack by a hostile.  The /var/log directory should not have either
0777 or 01777 permissions.

I suggest you mount your /var/log tmpfs with the mode=0755 option.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to