[pkg-lighttpd] Bug#398834: lighttpd: /var/log/ligghtpd/*.log is
world-readble
Olaf van der Spek
OlafvdSpek at GMail.Com
Wed Nov 15 21:35:21 CET 2006
Package: lighttpd
Version: 1.4.13-4
Severity: normal
Hi,
# ls -al /var/log/lighttpd/
total 12
drwxr-xr-x 2 www-data www-data 4096 2006-11-15 21:29 .
drwxr-xr-x 9 root root 4096 2006-11-15 21:31 ..
-rw-r--r-- 1 www-data www-data 0 2006-11-15 21:29 access.log
-rw-r--r-- 1 www-data www-data 97 2006-11-15 21:30 error.log
The logs shouldn't be world-readable.
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-486
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages lighttpd depends on:
ii libattr1 2.4.32-1 Extended attribute shared library
ii libbz2-1.0 1.0.3-6 high-quality block-sorting file co
ii libc6 2.3.6.ds1-7 GNU C Library: Shared libraries
ii libldap2 2.1.30-13+b1 OpenLDAP libraries
ii libpcre3 6.7-1 Perl 5 Compatible Regular Expressi
ii libssl0.9.8 0.9.8c-3 SSL shared libraries
ii lsb-base 3.1-15 Linux Standard Base 3.1 init scrip
ii mime-support 3.37-1 MIME files 'mime.types' & 'mailcap
ii zlib1g 1:1.2.3-13 compression library - runtime
Versions of packages lighttpd recommends:
pn php4-cgi | php5-cgi <none> (no description available)
-- no debconf information
More information about the pkg-lighttpd-maintainers
mailing list