OpenDeploy log permissions

OD Version: 5.5.1 Build 11146 SYM Interwoven 20020829
Solaris

We have a little auditing issue.

Currently our OD log files are being written with the permissions u=rw- g=rw- o=rw-
Our policy states that o=r-- (no write for other)

I haven't seem to have found anything on this.

OD runs as root and the root umask is 0177.

The documentation talks about certain log rules, but not specifically about this.

Any pointers?

Thanks

John Cuiuli

Find more posts tagged with

Comments

Adam Stoller

I believe this was reported and was supposed to be fixed in a subsequent release of OD - but I don't see any reference to this being fixed in OD 5.6 or 6.0 at this time (maybe I missed it?).

Hopefully Todd will be able to chime in with the details about if it was fixed (and how) or if not - the tracking number for this feature.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Johnny

Thanks for the info.

I did a search here to see if I could find something like that...
but the number of hits were huge.
How bout a google search Smiley Happy

John Cuiuli

Adam Stoller

Found it - this thread.

But to save you a click - it appears to be FR #38452

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Johnny

That's going back. Thanks.

not good news.

John Cuiuli

Adam Stoller

Note - looking at my customer case related to this - I see the following from Support:

"Log files generated from Opendeploy will have permission of 644 starting OD 6.0."

I didn't notice anything about that in the manuals or release notes (again, maybe I missed something) but I can actually verify that the log files on my OD6 server are -rw-r--r-- (644) - so I guess upgrading to OD6 will solve your problem.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Johnny

Hey thanks for that Adam.

That's exactly what I need to hear.
Another point to justify an upgrade of the whole system.

John Cuiuli

Migrateduser

I can confirm that this change was to have occurred as of OD 6.0. I don't see anything in the docs mentioning this change -- will file a doc bug on that.

FR 38452 is a different request. It is asking for the setting of perms on the log files to be configurable.

Todd Scallan
Director of Product Management
Interwoven
t: 408-530-7167
e: tscallan@interwoven.com