[Bug 569085] [NEW] improper group write permission for error.log

Jamie Strandboge jamie at ubuntu.com
Fri Apr 23 17:41:55 BST 2010


Public bug reported:

On a fresh install of Ubuntu 10.04 LTS server, I found the following odd permissions:
/var/log/mysql/error.log -rw-rw---- mysql adm

It is highly unusual for a logfile to have group write permission, even
more so for the 'adm' group. It is possible this could be fixed by
adjusting the umask in the upstart job to use '027', but this may break
other things. Alternatively, though less clean, change the group to be
the same as the owner (ie mysql), though an administer would not be able
to view the file without sudo/su.

In Hardy, all mysql log files had proper permissions like so:
/var/log/mysql.log -rw-r----- 1 mysql adm

This is not release critical, but should be fixed.

** Affects: mysql-dfsg-5.1 (Ubuntu)
     Importance: Low
         Status: Confirmed

** Changed in: mysql-dfsg-5.1 (Ubuntu)
       Status: New => Confirmed

** Changed in: mysql-dfsg-5.1 (Ubuntu)
   Importance: Undecided => Low

-- 
improper group write permission for error.log
https://bugs.launchpad.net/bugs/569085
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu.



More information about the Ubuntu-server-bugs mailing list