From 2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a Mon Sep 17 00:00:00 2001
From: Martin Nagy <mnagy@redhat.com>
Date: Tue, 20 May 2008 10:19:19 +0200
Subject: Change file mode of log files to 600.

446869
---
 ipa-server/ipaserver/installutils.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'ipa-server/ipaserver/installutils.py')

diff --git a/ipa-server/ipaserver/installutils.py b/ipa-server/ipaserver/installutils.py
index 5eca5971..ee3c1c77 100644
--- a/ipa-server/ipaserver/installutils.py
+++ b/ipa-server/ipaserver/installutils.py
@@ -143,12 +143,14 @@ def port_available(port):
     return rv
 
 def standard_logging_setup(log_filename, debug=False):
+    old_umask = os.umask(077)
     # Always log everything (i.e., DEBUG) to the log
     # file.
     logging.basicConfig(level=logging.DEBUG,
                         format='%(asctime)s %(levelname)s %(message)s',
                         filename=log_filename,
                         filemode='w')
+    os.umask(old_umask)
 
     console = logging.StreamHandler()
     # If the debug option is set, also log debug messages to the console
-- 
cgit