Hello,

while working on SELinux, I see that httpd opens logs (via rhnLog.py)
for reading. I plan to change the mode from a+ to a, via change below.

Do you see any problem with this change?

diff --git a/backend/common/rhnLog.py b/backend/common/rhnLog.py
index e43c428..0b06af3 100644
--- a/backend/common/rhnLog.py
+++ b/backend/common/rhnLog.py
@@ -184,7 +184,7 @@ class rhnLog:
         # else, open it as a real file, with locking and stuff        
         try:
             # try to open it in line buffered mode
-            self.fd = open(self.file, "a+", 1)
+            self.fd = open(self.file, "a", 1)
             set_close_on_exec(self.fd)
             if newfileYN:
                 apache_uid, apache_gid = getUidGid('apache', 'apache')

-- 
Jan Pazdziora
Satellite Engineering, Red Hat

_______________________________________________
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel

Reply via email to