Logcheck devel - Feb 2006 - Bug#352339: please tighten permissions of /etc/logcheck/*

Package: logcheck
Severity: wishlist

I suggest removing write rights for the group `logcheck` from
directories in /etc/logcheck. Rationale: members of the logcheck
group need not write these directories (or do they?).

I also suggest removing the group write right from
/etc/logcheck/logcheck.*

Thanks,

-- System Information:
Debian Release: testing/unstable
  APT prefers stable
  APT policy: (700, 'stable'), (600, 'testing'), (98,
'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-686
Locale: LANG=en_GB, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

-- 
 .''`.     martin f. krafft <madduck at debian.org>
: :'  :    proud Debian developer and author: http://debiansystem.info
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
 
apt-get source --compile gentoo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature (GPG/PGP)
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060211/96753b06/attachment.pgp

tags 352339 moreinfo
thanks

On 11 Feb 2006, at 11:40, martin f krafft wrote:
> I suggest removing write rights for the group `logcheck` from
> directories in /etc/logcheck. Rationale: members of the logcheck
> group need not write these directories (or do they?).
>
> I also suggest removing the group write right from
> /etc/logcheck/logcheck.*
As far as I can see, the group logcheck has no write privileges over  
any file or directory under /etc/logcheck:

$ sudo find /etc/logcheck -perm /g+w
$

Reinstalling the logcheck package should restore the permissions to  
their default.

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
  t: +44 1273 424795; f: +44 1273 424795
  PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
  never send mail to: oubliette.z at gmail.com


-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060212/4b7144f1/attachment.pgp

Processing commands for control at bugs.debian.org:
> tags 352339 moreinfo
Bug#352339: please tighten permissions of /etc/logcheck/*
There were no tags set.
Tags added: moreinfo
> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)