From 2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a Mon Sep 17 00:00:00 2001
From: Martin Nagy <mnagy@redhat.com>
Date: Tue, 20 May 2008 10:19:19 +0200
Subject: Change file mode of log files to 600.

446869
---
 ipa-client/ipa-install/ipa-client-install | 3 +++
 ipa-server/ipaserver/installutils.py      | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install
index 5355d568..54d7185a 100644
--- a/ipa-client/ipa-install/ipa-client-install
+++ b/ipa-client/ipa-install/ipa-client-install
@@ -63,10 +63,12 @@ def logging_setup(options):
     if options.uninstall:
         log_file = "/var/log/ipaclient-uninstall.log"
 
+    old_umask = os.umask(077)
     logging.basicConfig(level=logging.DEBUG,
                         format='%(asctime)s %(levelname)s %(message)s',
                         filename=log_file,
                         filemode='w')
+    os.umask(old_umask)
 
     console = logging.StreamHandler()
     # If the debug option is set, also log debug messages to the console
@@ -368,6 +370,7 @@ def main():
 try:
     import sys
 
+    import os
     import krbV
     import socket
     import logging
diff --git a/ipa-server/ipaserver/installutils.py b/ipa-server/ipaserver/installutils.py
index 5eca5971..ee3c1c77 100644
--- a/ipa-server/ipaserver/installutils.py
+++ b/ipa-server/ipaserver/installutils.py
@@ -143,12 +143,14 @@ def port_available(port):
     return rv
 
 def standard_logging_setup(log_filename, debug=False):
+    old_umask = os.umask(077)
     # Always log everything (i.e., DEBUG) to the log
     # file.
     logging.basicConfig(level=logging.DEBUG,
                         format='%(asctime)s %(levelname)s %(message)s',
                         filename=log_filename,
                         filemode='w')
+    os.umask(old_umask)
 
     console = logging.StreamHandler()
     # If the debug option is set, also log debug messages to the console
-- 
cgit