oss-sec mailing list archives

nginx world-readable logdir


From: Agostino Sarubbo <ago () gentoo org>
Date: Thu, 21 Feb 2013 18:50:14 +0100

Hello,

I just noticed my nginx logdir and its content are world-readable:

drwxr-xr-x  2 root root  4096 Jan 10 00:11 .
drwxr-xr-x 16 root root  4096 Feb 21 17:46 ..
-rw-r--r--  1 root root 69415 Feb 21 17:46 error_log
-rw-r--r--  1 root root 93017 Feb 18 22:03 localhost.access_log
-rw-r--r--  1 root root 86227 Feb 18 22:03 localhost.error_log

What do you think about?

-- 
Agostino Sarubbo / ago -at- gentoo.org
Gentoo Linux Developer


Current thread: