Changeset 2379

Timestamp:

Feb 27, 2013, 10:07:41 AM (13 years ago)

Author:

adehnert

Message:

Correctly set mode of suexec.log

Historically, suexec.log has been rolled with error_log, and thus the
permissions have matched. However, suexec.log is considered too private for
logview@ to be able to read. We've handled this by making /var/log/httpd/
readable only by root, but by fixing suexec.log's permissions we eliminate the
possibility of it being readable by some sort of subtle trick, and also open
the way to making /var/log/httpd/ more broadly readable.

File:

• trunk/server/fedora/config/etc/logrotate.d/httpd (modified) (2 diffs)

trunk/server/fedora/config/etc/logrotate.d/httpd

@@ -1 @@
-/var/log/httpd/*.log /home/logview/*log {
+/home/logview/*log {
     rotate 0
     daily
@@ -9 +9 @@
         /bin/kill -HUP `cat /var/run/httpd/httpd.pid 2>/dev/null` 2> /dev/null || true
     endscript
+}
+
+/var/log/httpd/suexec.log {
+    rotate 0
+    daily
+    missingok
+    notifempty
+    create 600 root root
+    # No HUP, because suexec doesn't open this log persistently.
 }