tag 608491 + patch
done

Hi again,

I've managed to rebuild syslog-ng on kfreebsd-i386 with my previous
patch applied to properly test it.  syslog-ng now sets file permissions
on log files appropriately to the configuration setting of perm(), or
otherwise 0600 if it wasn't defined.  The patched version is still
working as expected on Linux amd64.

The new mode is used when a log file is created or has new data written
to it;  files that were mistakenly set mode 0xffff will be fixed by
upgrading.  But if any files don't have new data written to them, or
were already moved out of the way by logrotate, those will unavoidably
keep the buggy 0xffff setuid+setgid mode.

If using create_dirs(yes) in syslog-ng.conf (disabled by default in
Debian), the same bug was causing newly-created directories to have mode
0xffff.  My patch fixed this too, now using the configuration setting of
dir_perm(), or otherwise 0700 if it wasn't defined.  Directories that
have already been created by syslog-ng are never chmod'd again, so won't
be automatically fixed by this patch.

Regards,
-- 
Steven Chamberlain
ste...@pyro.eu.org



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to