Bug#414562: marked as done (cupsys: rotated logs world readable)
Your message dated Sat, 14 Jul 2007 22:24:11 +0900
with message-id <20070714132356.A51BE1A787F@mail.topstudio.co.jp>
and subject line [Pkg-cups-devel] Bug#414562: not a rotation problem
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: cupsys: rotated logs world readable
- From: Ian Zimmerman <itz@madbat.mine.nu>
- Date: Mon, 12 Mar 2007 10:52:50 -0400
- Message-id: <20070312145250.4794.48048.reportbug@unicorn.ahiker.homeip.net>
Package: cupsys
Version: 1.2.7-4
Severity: normal
One day after installing cupsys (with all the default settings),
I see this:
root@unicorn:~# ls -l /var/log/cups
total 16
-rw-r--r-- 1 root lp 2660 Mar 12 10:43 access_log
-rw-r--r-- 1 root lp 1159 Mar 12 10:32 access_log.1.gz
-rw-r----- 1 root lp 0 Mar 12 10:38 error_log
-rw-r--r-- 1 root lp 97 Mar 12 01:48 error_log.1.gz
-rw-r----- 1 root lp 0 Mar 12 10:38 page_log
-rw-r--r-- 1 root lp 78 Mar 12 10:32 page_log.1.gz
Bad.
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/dash
Kernel: Linux 2.6.18-11custom200703020153
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages cupsys depends on:
ii adduser 3.102 Add and remove users and groups
ii cupsys-common 1.2.7-4 Common UNIX Printing System(tm) -
ii debconf [debconf-2.0] 1.5.11 Debian configuration management sy
ii gs-esp 8.15.3.dfsg.1-1 The Ghostscript PostScript interpr
ii libc6 2.3.6.ds1-13 GNU C Library: Shared libraries
ii libcupsimage2 1.2.7-4 Common UNIX Printing System(tm) -
ii libcupsys2 1.2.7-4 Common UNIX Printing System(tm) -
ii libdbus-1-3 1.0.2-1 simple interprocess messaging syst
ii libgnutls13 1.4.4-3 the GNU TLS library - runtime libr
ii libldap2 2.1.30-13.3 OpenLDAP libraries
ii libpam0g 0.79-4 Pluggable Authentication Modules l
ii libpaper1 1.1.21 Library for handling paper charact
ii libslp1 1.2.1-6.2 OpenSLP libraries
ii lsb-base 3.1-23 Linux Standard Base 3.1 init scrip
ii patch 2.5.9-4 Apply a diff file to an original
ii perl-modules 5.8.8-7 Core Perl modules
ii procps 1:3.2.7-3 /proc file system utilities
ii xpdf-utils [poppler-util 3.01-9 Portable Document Format (PDF) sui
ii zlib1g 1:1.2.3-13 compression library - runtime
Versions of packages cupsys recommends:
ii cupsys-client 1.2.7-4 Common UNIX Printing System(tm) -
ii foomatic-filters 3.0.2-20061031-1.1 linuxprinting.org printer support
pn smbclient <none> (no description available)
-- debconf information:
cupsys/raw-print: true
cupsys/backend: ipp, lpd, parallel, socket, usb
--- End Message ---
--- Begin Message ---
- To: 414562-done@bugs.debian.org
- Subject: Re: [Pkg-cups-devel] Bug#414562: not a rotation problem
- From: Kenshi Muto <kmuto@debian.org>
- Date: Sat, 14 Jul 2007 22:24:11 +0900
- Message-id: <20070714132356.A51BE1A787F@mail.topstudio.co.jp>
- In-reply-to: <87wt1mpizo.fsf@unicorn.ahiker.homeip.net>
- References: <87wt1mpizo.fsf@unicorn.ahiker.homeip.net>
At 12 Mar 2007 11:41:15 -0400,
Ian Zimmerman wrote:
> Actually, the problem is not in the rotation: when I chmod the files and then
> force the rotation, everything is OK. But ... only until I actually access a
> page, or print something. _Then_ cups sets the world read bit on the current
> log file, and the next rotation naturally preserves the permissions.
LogFilePerm helps you (help document on Web interface describes this).
For example, adding "LogFilePerm 0640" to /etc/cups/cupsd.conf provides
-rw-r----- permission for each log files when the logs are created.
access_log reflects it soon.
FYI, Lenny/Sid uses -rw-r----- cupsys:lpadmin. You have to modify
/etc/init.d/cupsys along with LogFilePerm.
Thanks,
--
Kenshi Muto
kmuto@debian.org
--- End Message ---
Reply to: