[4707] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Changing default UMASK for all daemons

daemon@ATHENA.MIT.EDU (Tomasz R. Surmacz)
Mon Jun 16 18:09:27 1997

Date: 	Mon, 16 Jun 1997 16:39:17 +0200
Reply-To: "Tomasz R. Surmacz" <tsurmacz@ICT.PWR.WROC.PL>
From: "Tomasz R. Surmacz" <tsurmacz@ICT.PWR.WROC.PL>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <Pine.A32.3.93.970614172655.46276B-100000@tiwa.gate.net> from Joe
              Traister at "Jun 14, 97 05:34:03 pm"

Joe Traister wrote:
> On Fri, 13 Jun 1997, Dax Kelson wrote:
> > This is applicable regarding files created by syslog, ftpd, etc.
[...]
> > This is from the Solaris 2.x FAQ:
> > http://www.wins.uva.nl/pub/solaris/solaris2/
> >
> > 3.48) How can I prevent daemons from creating mode 666 files?
[...]
> Unfortunately this will not fix the problem with /var/log/syslog being 666
> since the log rotation script /usr/lib/newsyslog explicitly sets the mode
> of this file to 666 when rotating it (at least under Solaris 2.5 on x86).

This is a completely different problem, which can be trivially solved
by editing the /usr/lib/newsyslog script and changing 'chmod 666 $LOG' to
'chmod 644 $LOG'  or if you want to do it 'the proper way' as Sun thinks
you should, you may install the appropriate patch:

104614-01   SunOS 5.5.1_x86: /usr/lib/newsyslog patch
104613-01   SunOS 5.5.1: /usr/lib/newsyslog patch
104617-01   SunOS 5.4: /usr/lib/newsyslog patch

Tomasz

--
 _________
(_   _' __) Tomasz R. Surmacz *--* Work:(071)320-2636 tsurmacz@ict.pwr.wroc.pl
  |  (__  \ http://www.ict.pwr.wroc.pl/~tsurmacz/ *----* Home: ts@wroc.apk.net
  |__(____/ For PGP key finger tsurmacz@asic.ict.pwr.wroc.pl *---* irc: TomekS

home help back first fref pref prev next nref lref last post