Bug#568641: ntop: access.log is writeable by everyone

2010-02-10 Thread Ola Lundqvist
Hi On Tue, Feb 09, 2010 at 09:25:44PM +0100, J.M.Roth wrote: On 2/9/2010 9:13 PM, Ola Lundqvist wrote: When setting the correct permissions (u=rx,g=rxs,o= with ownership ntop:ntop) on the directory, the permissions will always be ok: - the directory will not be accessible by anyone else

Bug#568641: ntop: access.log is writeable by everyone

2010-02-09 Thread J.M.Roth
On 2/9/2010 8:45 AM, Ola Lundqvist wrote: On Mon, Feb 08, 2010 at 11:24:52PM +0100, J.M.Roth wrote: On 2/8/2010 11:13 PM, Ola Lundqvist wrote: drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . drwxr-xr-x 12 root root 4096 2010-01-27 11:17 .. -rw-rw-rw- 1 root root0 2010-01-27 11:18

Bug#568641: ntop: access.log is writeable by everyone

2010-02-09 Thread J.M.Roth
On 2/9/2010 9:13 PM, Ola Lundqvist wrote: When setting the correct permissions (u=rx,g=rxs,o= with ownership ntop:ntop) on the directory, the permissions will always be ok: - the directory will not be accessible by anyone else than ntop, - the contained files will have appropriate rights to

Bug#568641: ntop: access.log is writeable by everyone

2010-02-09 Thread Ola Lundqvist
Hi On Tue, Feb 09, 2010 at 10:52:51AM +0100, J.M.Roth wrote: On 2/9/2010 8:45 AM, Ola Lundqvist wrote: On Mon, Feb 08, 2010 at 11:24:52PM +0100, J.M.Roth wrote: On 2/8/2010 11:13 PM, Ola Lundqvist wrote: drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . drwxr-xr-x 12 root root 4096

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread J.M.Roth
On 2/8/2010 7:54 AM, Ola Lundqvist wrote: /var/log/access.log is writeable by everyone. The following would fix that: The file or the directory? My file has the following permission: drwxr-xr-x 2 ntop root 89 May 10 2009 . drwxr-xr-x 15 root root4096 Feb 8 01:21 .. -rw---

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread Ola Lundqvist
Hi On Mon, Feb 08, 2010 at 11:02:49AM +0100, J.M.Roth wrote: On 2/8/2010 7:54 AM, Ola Lundqvist wrote: /var/log/access.log is writeable by everyone. The following would fix that: The file or the directory? My file has the following permission: drwxr-xr-x 2 ntop root 89 May 10

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread J.M.Roth
On 2/8/2010 11:13 PM, Ola Lundqvist wrote: drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . drwxr-xr-x 12 root root 4096 2010-01-27 11:17 .. -rw-rw-rw- 1 root root0 2010-01-27 11:18 access.log Not good. However I do not think postinst is good enough. We must change the umask instead so

Bug#568641: ntop: access.log is writeable by everyone

2010-02-08 Thread Ola Lundqvist
Hi On Mon, Feb 08, 2010 at 11:24:52PM +0100, J.M.Roth wrote: On 2/8/2010 11:13 PM, Ola Lundqvist wrote: drwxr-xr-x 2 ntop root 4096 2010-01-27 11:18 . drwxr-xr-x 12 root root 4096 2010-01-27 11:17 .. -rw-rw-rw- 1 root root0 2010-01-27 11:18 access.log Not good. However I do not

Bug#568641: ntop: access.log is writeable by everyone

2010-02-07 Thread Ola Lundqvist
Hi On Sat, Feb 06, 2010 at 02:11:25PM +0100, J.M.Roth wrote: Package: ntop Version: 3:3.3-11+b2 Severity: normal Tags: patch, security /var/log/access.log is writeable by everyone. The following would fix that: The file or the directory? My file has the following permission: drwxr-xr-x

Bug#568641: ntop: access.log is writeable by everyone

2010-02-06 Thread J.M.Roth
Package: ntop Version: 3:3.3-11+b2 Severity: normal Tags: patch, security /var/log/access.log is writeable by everyone. The following would fix that: --- postinst2008-08-06 17:55:17.0 +0200 +++ postinst.new2010-02-06 14:07:59.0 +0100 @@ -35,14 +35,17 @@