[packaging] [Bug 2638] New: logrotate reports errors regarding log directory permissions

Kolab Bugzilla noreply at kolab.org
Sun Dec 1 22:13:49 CET 2013


https://issues.kolab.org/show_bug.cgi?id=2638

            Bug ID: 2638
           Summary: logrotate reports errors regarding log directory
                    permissions
    Classification: Kolab Server
           Product: Kolab Server
           Version: 3.1-next
          Hardware: PC
                OS: Mac OS
            Status: NEW
          Severity: normal
          Priority: P3
         Component: packaging - rpm - fedora
          Assignee: vanmeeuwen at kolabsys.com
          Reporter: brad.rubenstein at gmail.com
        QA Contact: packaging-bugs at lists.kolabsys.com
       Ticket Type: ---

As packaged for FC19, the /var/log subdirectories installed by kolab have group
write permission enabled, which causes logrotate errors.  
(mode 0750 is expected, I believe).

# find /var/log -type d -perm -020
/var/log/roundcubemail
/var/log/iRony
/var/log/kolab-syncroton
/var/log/kolab
/var/log/kolab-freebusy
/var/log/dirsrv/slapd-kolab
/var/log/kolab-webadmin

Packages:
iRony-0.2.4-2.fc19.kolab_3.1.noarch
kolab-syncroton-2.2.3-17.fc19.kolab_3.1.noarch
pykolab-0.6.9-10.fc19.kolab_3.1.noarch
kolab-freebusy-1.0.2-8.3.fc19.kolab_3.1.noarch
kolab-webadmin-3.1.3-9.fc19.kolab_3.1.noarch


Presence of write permission generates the following logrotate error messages:

/etc/cron.daily/logrotate:

error: skipping "/var/log/kolab-syncroton/console" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/errors" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/imap" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/ldap" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/sendmail" because parent directory
has insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/sieve" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/smtp" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/sql" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/kolab-syncroton/userlogins" because parent directory
has insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/console" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/errors" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/imap" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/ldap" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/sendmail" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/sieve" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/smtp" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/sql" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.
error: skipping "/var/log/roundcubemail/userlogins" because parent directory
has insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolabsys.com/pipermail/packaging-bugs/attachments/20131201/43614756/attachment.htm>


More information about the packaging-bugs mailing list