Bugtraq mailing list archives

Re: Changing default UMASK for all daemons


From: tsurmacz () ICT PWR WROC PL (Tomasz R. Surmacz)
Date: Mon, 16 Jun 1997 16:39:17 +0200


Joe Traister wrote:
On Fri, 13 Jun 1997, Dax Kelson wrote:
This is applicable regarding files created by syslog, ftpd, etc.
[...]
This is from the Solaris 2.x FAQ:
http://www.wins.uva.nl/pub/solaris/solaris2/

3.48) How can I prevent daemons from creating mode 666 files?
[...]
Unfortunately this will not fix the problem with /var/log/syslog being 666
since the log rotation script /usr/lib/newsyslog explicitly sets the mode
of this file to 666 when rotating it (at least under Solaris 2.5 on x86).

This is a completely different problem, which can be trivially solved
by editing the /usr/lib/newsyslog script and changing 'chmod 666 $LOG' to
'chmod 644 $LOG'  or if you want to do it 'the proper way' as Sun thinks
you should, you may install the appropriate patch:

104614-01   SunOS 5.5.1_x86: /usr/lib/newsyslog patch
104613-01   SunOS 5.5.1: /usr/lib/newsyslog patch
104617-01   SunOS 5.4: /usr/lib/newsyslog patch

Tomasz

--
 _________
(_   _' __) Tomasz R. Surmacz *--* Work:(071)320-2636 tsurmacz () ict pwr wroc pl
  |  (__  \ http://www.ict.pwr.wroc.pl/~tsurmacz/ *----* Home: ts () wroc apk net
  |__(____/ For PGP key finger tsurmacz () asic ict pwr wroc pl *---* irc: TomekS



Current thread: