[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-02-07 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Frère Sébastien Marie changed: What|Removed |Added Priority|PATCH-Sent (DO NOT USE) |P1 - high

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-17 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Katrin Fischer changed: What|Removed |Added Status|Pushed to Master|Pushed to Stable -- Configu

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-13 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #14 from Jonathan Druart 2012-01-13 09:59:55 UTC --- @Paul: sorry, it's ok in master. But the patch doesn't comment all lines -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email --

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-13 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #13 from Paul Poulain 2012-01-13 09:49:56 UTC --- (In reply to comment #11) > In installer/InstallAuth.pm, the patch comments the line : > # open L, ">>/tmp/sessionlog"; > > but L is used : > printf L "%20s from %16s logg

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-11 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #12 from Chris Cormack 2012-01-11 18:21:18 UTC --- (In reply to comment #11) > In installer/InstallAuth.pm, the patch comments the line : > # open L, ">>/tmp/sessionlog"; > > but L is used : > printf L "%20s from %16s log

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-11 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Jonathan Druart changed: What|Removed |Added CC||jonathan.dru...@biblibre.co

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-06 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #10 from Paul Poulain 2012-01-06 13:35:43 UTC --- The more I think of it, the more I think we should remove and not just comment. And we should also remove sub _session_log ! -- Configure bugmail: http://bugs.koha-commu

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-06 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Paul Poulain changed: What|Removed |Added Status|NEW |ASSIGNED CC|

[Koha-bugs] [Bug 6627] [security] insecure file creation

2012-01-05 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Ian Walls changed: What|Removed |Added CC||ian.walls@bywatersolutions.

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-30 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Liz Rea changed: What|Removed |Added CC||wizzy...@gmail.com Patch Stat

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-30 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Liz Rea changed: What|Removed |Added Attachment #6897|0 |1 is obsolete|

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-30 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Chris Cormack changed: What|Removed |Added Version|unspecified |master -- Configure bugmail:

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-22 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #6 from Frère Sébastien Marie 2011-12-23 05:38:53 UTC --- M. de Rooy, I agreed with you: know who was logged at specific time is important. It is a security measure (logging auth information). But, I also agreed with Chri

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-22 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #5 from Chris Cormack 2011-12-22 19:35:18 UTC --- Or an antifeature in this case. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email --- You are receiving this mail because: -

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-22 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Katrin Fischer changed: What|Removed |Added CC||katrin.fisc...@bsz-bw.de ---

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-22 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Chris Cormack changed: What|Removed |Added Severity|critical|blocker -- Configure bugmail

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-22 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Chris Cormack changed: What|Removed |Added CC||ch...@bigballofwax.co.nz ---

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-21 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 Duncan changed: What|Removed |Added Priority|P5 - low|PATCH-Sent CC|

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-21 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 M. de Rooy changed: What|Removed |Added CC||m.de.r...@rijksmuseum.nl --- Com

[Koha-bugs] [Bug 6627] [security] insecure file creation

2011-12-21 Thread bugzilla-daemon
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6627 --- Comment #1 from Duncan 2011-12-21 02:14:24 UTC --- Created attachment 6897 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6897 Patch to ensure higher security with relation to log files Removed session logging, n