| Summary: | Fix msec warning about enforced permissions on files the cron create itself. | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Raphael Gertz <mageia> |
| Component: | RPM Packages | Assignee: | Mageia tools maintainers <mageiatools> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | geiger.david68210, marja11, yvesbrungard |
| Version: | Cauldron | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Source RPM: | msec-2.1-1.mga6.src.rpm | CVE: | |
| Status comment: | |||
|
Marja Van Waes
2016-09-20 18:33:56 CEST
CC:
(none) =>
marja11 commit 92cb687deaf06ab79dfb3e6ff7ea921e4696bcd3
Author: Papoteur <papoteur@...>
Date: Sun Sep 25 20:16:02 2016 +0200
set permission on just created MAIL_LOG_TODAY mga#19335
---
Commit Link:
http://gitweb.mageia.org/software/msec/commit/?id=92cb687deaf06ab79dfb3e6ff7ea921e4696bcd3
Thanks for your report! So should be fixed in next msec update. - msec-2.2-1.mga6 CC:
(none) =>
geiger.david68210 Msec 2.2-1 is pushed. Status:
NEW =>
RESOLVED |
Description of problem: Hi, the /etc/cron.daily/msec -> /usr/share/msec/security.sh create at line 124 the file /var/log/security/mail.${CURRENT_CHECK_TYPE}.today. On the next run of the script msecperms will complain about this file not being owned by adm group and not in 0640 mode. Could you please insert at line 125 this line : /usr/sbin/msecperms -q ${MAIL_LOG_TODAY} That way the perms are fixed silently for the file msec just went to create and we avoid a useless warning + mail. Version-Release number of selected component (if applicable): msec-2.1-1.mga6 How reproducible: Daily, weekly, monthly Steps to Reproduce: 1. Enable msec in webserver runlevel with configured email 2. Let daily cron run : "/etc/cron.daily/msec" 3. Watch your mailbox about useless mail titled "Cron <root@localhost> nice -n 19 run-parts --report /etc/cron.daily" with content : /etc/cron.daily/msec: WARNING: Groupe de /var/log/security/mail.daily.today forcé à adm WARNING: Application des permissions de /var/log/security/mail.daily.today à 640