Bug#406338: lighttpd: /var/log/ligghtpd/*.log is readable by www-data

2014-04-05 Thread Michael Gilbert
Would you mind looking into lighttpd-angel (/usr/sbin/lighttpd-angel), which was added to lighttpd upstream (and the debian package) almost 7 years ago as a possible fix to your upstream bug report? Best wishes, Mike -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#406338: lighttpd: /var/log/ligghtpd/*.log is readable by www-data

2014-04-05 Thread Olaf van der Spek
Hi team member, Angel is a 2.0 thing (mostly) AFAIK. On Sat, Apr 5, 2014 at 8:33 PM, Michael Gilbert mgilb...@debian.org wrote: Would you mind looking into lighttpd-angel (/usr/sbin/lighttpd-angel), which was added to lighttpd upstream (and the debian package) almost 7 years ago as a possible

Bug#406338: lighttpd: /var/log/ligghtpd/*.log is readable by www-data

2010-03-07 Thread Stefan Bühler
Hi, as lighttpd needs to be able to reopen the logfiles after logrotate, the www- data user needs +rw. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#406338: lighttpd: /var/log/ligghtpd/*.log is readable by www-data

2010-03-07 Thread Olaf van der Spek
2010/3/7 Stefan Bühler light...@stbuehler.de: Hi, as lighttpd needs to be able to reopen the logfiles after logrotate, the  www- data user needs +rw. See http://redmine.lighttpd.net/issues/show/1271 Use a pipe logger. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

Bug#406338: lighttpd: /var/log/ligghtpd/*.log is readable by www-data

2007-01-10 Thread Olaf van der Spek
Package: lighttpd Version: 1.4.13-8 Severity: normal Hi, /var/log/ligghtpd/*.log is readable and writeable by www-data. User www-data should not have this access. -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: