summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMartin Nagy <mnagy@redhat.com>2008-05-20 10:19:19 +0200
committerRob Crittenden <rcritten@redhat.com>2008-05-20 22:43:03 -0400
commit2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a (patch)
tree0b294b845149f7decfeb50cbd7970aa05b966d4a
parentfcd3260955f38bda970b6cba16b72b576d727b63 (diff)
downloadfreeipa.git-2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a.tar.gz
freeipa.git-2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a.tar.xz
freeipa.git-2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a.zip
Change file mode of log files to 600.
446869
-rw-r--r--ipa-client/ipa-install/ipa-client-install3
-rw-r--r--ipa-server/ipaserver/installutils.py2
2 files changed, 5 insertions, 0 deletions
diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install
index 5355d568..54d7185a 100644
--- a/ipa-client/ipa-install/ipa-client-install
+++ b/ipa-client/ipa-install/ipa-client-install
@@ -63,10 +63,12 @@ def logging_setup(options):
if options.uninstall:
log_file = "/var/log/ipaclient-uninstall.log"
+ old_umask = os.umask(077)
logging.basicConfig(level=logging.DEBUG,
format='%(asctime)s %(levelname)s %(message)s',
filename=log_file,
filemode='w')
+ os.umask(old_umask)
console = logging.StreamHandler()
# If the debug option is set, also log debug messages to the console
@@ -368,6 +370,7 @@ def main():
try:
import sys
+ import os
import krbV
import socket
import logging
diff --git a/ipa-server/ipaserver/installutils.py b/ipa-server/ipaserver/installutils.py
index 5eca5971..ee3c1c77 100644
--- a/ipa-server/ipaserver/installutils.py
+++ b/ipa-server/ipaserver/installutils.py
@@ -143,12 +143,14 @@ def port_available(port):
return rv
def standard_logging_setup(log_filename, debug=False):
+ old_umask = os.umask(077)
# Always log everything (i.e., DEBUG) to the log
# file.
logging.basicConfig(level=logging.DEBUG,
format='%(asctime)s %(levelname)s %(message)s',
filename=log_filename,
filemode='w')
+ os.umask(old_umask)
console = logging.StreamHandler()
# If the debug option is set, also log debug messages to the console