[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Frère Sébastien Marie semarie-k...@latrappe.fr changed: What|Removed |Added Priority|PATCH-Sent (DO NOT USE)

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Katrin Fischer katrin.fisc...@bsz-bw.de changed: What|Removed |Added Status|Pushed to Master

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #13 from Paul Poulain paul.poul...@biblibre.com 2012-01-13 09:49:56 UTC --- (In reply to comment #11) In installer/InstallAuth.pm, the patch comments the line : # open L, /tmp/sessionlog; but L is used : printf L

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #14 from Jonathan Druart jonathan.dru...@biblibre.com 2012-01-13 09:59:55 UTC --- @Paul: sorry, it's ok in master. But the patch doesn't comment all lines -- Configure bugmail:

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Jonathan Druart jonathan.dru...@biblibre.com changed: What|Removed |Added CC|

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #12 from Chris Cormack ch...@bigballofwax.co.nz 2012-01-11 18:21:18 UTC --- (In reply to comment #11) In installer/InstallAuth.pm, the patch comments the line : # open L, /tmp/sessionlog; but L is used : printf L

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Paul Poulain paul.poul...@biblibre.com changed: What|Removed |Added Status|NEW

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #10 from Paul Poulain paul.poul...@biblibre.com 2012-01-06 13:35:43 UTC --- The more I think of it, the more I think we should remove and not just comment. And we should also remove sub _session_log ! -- Configure

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Ian Walls ian.wa...@bywatersolutions.com changed: What|Removed |Added CC|

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Chris Cormack ch...@bigballofwax.co.nz changed: What|Removed |Added Version|unspecified

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Liz Rea wizzy...@gmail.com changed: What|Removed |Added Attachment #6897|0 |1 is

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Liz Rea wizzy...@gmail.com changed: What|Removed |Added CC|

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Chris Cormack ch...@bigballofwax.co.nz changed: What|Removed |Added CC|

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Chris Cormack ch...@bigballofwax.co.nz changed: What|Removed |Added Severity|critical

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Katrin Fischer katrin.fisc...@bsz-bw.de changed: What|Removed |Added CC|

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #5 from Chris Cormack ch...@bigballofwax.co.nz 2011-12-22 19:35:18 UTC --- Or an antifeature in this case. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email --- You are receiving

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #6 from Frère Sébastien Marie semarie-k...@latrappe.fr 2011-12-23 05:38:53 UTC --- M. de Rooy, I agreed with you: know who was logged at specific time is important. It is a security measure (logging auth information).

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #1 from Duncan dun...@catalyst.net.nz 2011-12-21 02:14:24 UTC --- Created attachment 6897 -- http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6897 Patch to ensure higher security with relation to log files

[Koha-bugs] [Bug 6627] [security] insecure file creation

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 M. de Rooy m.de.r...@rijksmuseum.nl changed: What|Removed |Added CC|