[Groonga-commit] groonga/groonga at 0682a55 [master] groonga-httpd logrotate: use groonga user

Back to archive index
Kouhei Sutou null+****@clear*****
Sun May 5 05:49:20 JST 2019


Kouhei Sutou	2019-05-05 05:49:20 +0900 (Sun, 05 May 2019)

  Revision: 0682a55cb6a4cc44f2dc857c1b2c25ffcd47210d
  https://github.com/groonga/groonga/commit/0682a55cb6a4cc44f2dc857c1b2c25ffcd47210d

  Message:
    groonga-httpd logrotate: use groonga user
    
    Debian: 928304
    
    CVE: 2019-11675
    
    Reported by Wolfgang Hotwagner. Thanks!!!

  Modified files:
    data/logrotate.d/centos/groonga-httpd.in
    packages/debian/groonga-httpd.logrotate

  Modified: data/logrotate.d/centos/groonga-httpd.in (+1 -0)
===================================================================
--- data/logrotate.d/centos/groonga-httpd.in    2019-04-29 06:24:04 +0900 (a17b8aa2b)
+++ data/logrotate.d/centos/groonga-httpd.in    2019-05-05 05:49:20 +0900 (8c19a3db8)
@@ -1,4 +1,5 @@
 /var/log/groonga/httpd/*.log {
+    su groonga groonga
     daily
     missingok
     rotate 30

  Modified: packages/debian/groonga-httpd.logrotate (+1 -1)
===================================================================
--- packages/debian/groonga-httpd.logrotate    2019-04-29 06:24:04 +0900 (018f546a6)
+++ packages/debian/groonga-httpd.logrotate    2019-05-05 05:49:20 +0900 (cf124b073)
@@ -1,11 +1,11 @@
 /var/log/groonga/httpd/*.log {
+    su groonga groonga
     daily
     missingok
     rotate 30
     compress
     delaycompress
     notifempty
-    create 640 groonga groonga
     sharedscripts
     postrotate
         . /etc/default/groonga-httpd
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.osdn.me/mailman/archives/groonga-commit/attachments/20190505/0f55e54e/attachment-0001.html>


More information about the Groonga-commit mailing list
Back to archive index