On Thu, Mar 16, 2017 at 03:03:47PM +0100, Timothy Redaelli wrote:
> The Open vSwitch log directory and files are currently set world readable.
> 
> However, since only Open vSwitch users and processes need to access this
> directory and files there is no need to allow the world to access them,
> since it can result in the exposure of sensitive information.
> 
> Signed-off-by: Timothy Redaelli <[email protected]>
> ---
>  lib/vlog.c           | 2 +-
>  utilities/ovs-lib.in | 5 +++--
>  utilities/ovs-pki.in | 2 +-
>  3 files changed, 5 insertions(+), 4 deletions(-)
> 
> I didn't change the MKDIR_P in automake.mk since it will be removed in
> https://patchwork.ozlabs.org/patch/737029/

I agree with the intent of this patch.

On my Debian system, most logs are group- as well as owner-readable.
Are Red Hat systems different in this way?
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to