[pkg-kolab] Bug#542188: Bug#542188: Permissions wrong on /var/log/kolab-webclient/horde.log

[Mathieu Parent]

tag 542188 + moreinfo unreproducible
thanks

On Tue, Aug 18, 2009 at 12:37 PM, Mark
Pavlichuk<pav5088 at internode.on.net> wrote:
(snip)

Thanks for your report.

> /var/log/kolab-webclient/horde.log is owned by root, but should be
> owned by www-data.

This file is not in the package, it is created when running horde
scipts or when surfing horde.

Surfing horde will create it as www-data. The scipts that I know also
run as www-data:
- http://git.debian.org/?p=pkg-horde/horde3.git;a=blob;f=debian/cron.d;hb=debian-sid
- http://git.debian.org/?p=pkg-horde/kronolith2.git;a=blob;f=debian/cron.d;hb=debian-sid

Can you check those files in /etc/cron.d if they match (#514528 was
fixed in kronolith 2.3.1-1)?
Have you any horde script which run as root?

> The permissions are 644 which is probably not
> desirable(?).

As the parent directory /var/log/kolab-webclient is owned by
www-data:www-data with mode 0750, this is not a security problem: Only
www-data has access.*

Regards

Mathieu