From: | "Alin Nastac (mrness)" <mrness@g.o> |
---|---|
To: | gentoo-commits@l.g.o |
Subject: | [gentoo-commits] gentoo-x86 commit in net-analyzer/ntop/files: ntop-3.3.9-accesslog-umask.patch |
Date: | Sat, 25 Apr 2009 09:30:13 |
Message-Id: | E1LxeD4-0001ZE-9v@stork.gentoo.org |
1 | mrness 09/04/25 09:30:10 |
2 | |
3 | Added: ntop-3.3.9-accesslog-umask.patch |
4 | Log: |
5 | Fix insecure log file creation (#266947). |
6 | (Portage version: 2.1.6.7/cvs/Linux x86_64, RepoMan options: --force) |
7 | |
8 | Revision Changes Path |
9 | 1.1 net-analyzer/ntop/files/ntop-3.3.9-accesslog-umask.patch |
10 | |
11 | file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-analyzer/ntop/files/ntop-3.3.9-accesslog-umask.patch?rev=1.1&view=markup |
12 | plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-analyzer/ntop/files/ntop-3.3.9-accesslog-umask.patch?rev=1.1&content-type=text/plain |
13 | |
14 | Index: ntop-3.3.9-accesslog-umask.patch |
15 | =================================================================== |
16 | diff -Nru ntop-3.3.9.orig/http.c ntop-3.3.9/http.c |
17 | --- ntop-3.3.9.orig/http.c 2008-11-07 00:56:35.000000000 +0000 |
18 | +++ ntop-3.3.9/http.c 2009-04-25 09:23:50.000000000 +0000 |
19 | @@ -1341,6 +1341,7 @@ |
20 | void initAccessLog(void) { |
21 | |
22 | if(myGlobals.runningPref.accessLogFile) { |
23 | + umask(0137); |
24 | myGlobals.accessLogFd = fopen(myGlobals.runningPref.accessLogFile, "a"); |
25 | if(myGlobals.accessLogFd == NULL) { |
26 | traceEvent(CONST_TRACE_ERROR, "Unable to create file %s. Access log is disabled.", |