OD 5.6 - log files with world writable permission

mikeymwong

Hi,

We're having a security problem regarding the log files permission.

All log files generated by the OD processes are having the world writable bit. And this make us failed when we do our internal security acceptance test.

How can we configure the OD to generate log files without the world writable permission?

###
# ls -ltr
total 17652
drwxr-xr-x 2 root root 4096 Sep 20 00:27 001
-rw-rw-r-- 1 root root 483 Sep 20 06:35 src.test.MYDEFINITIONNAME.build002.to.build001.log.mf
-rw-rw-rw- 1 root root 21535 Sep 20 06:35 src.test.MYDEFINITIONNAME.build002.to.build001.log
-rw-rw-r-- 1 root root 682 Oct 4 17:51 src.test.MYDEFINITIONNAME.build002.to.px956.log.mf
-rw-rw-rw- 1 root root 171107 Oct 4 17:51 src.test.MYDEFINITIONNAME.build002.to.px956.log
...
# pwd
/shared/home/appl/Interwoven/OpenDeployNG/log
#
###

Our OD version:
Version: 5.6.0.1.0 Build 21220 Interwoven 20030618


Thanks.

Mike

Adam Stoller

Hi, We're having a security problem regarding the log files permission. All log files generated by the OD processes are having the world writable bit. And this make us failed when we do our internal security acceptance test. How can we configure the OD to generate log files without the world writable permission? [...] Our OD version: Version: 5.6.0.1.0 Build 21220 Interwoven 20030618 Thanks. Mike

I suggest you check with Interwoven Support. I seem to recall running into this once before, but I don't remember if there was a bug or feature request filed, or if the problem was not repeatable (I don't see a record of it in my personal support cases - but it might have been a case that got re-associated to the customer I was working with at the time)