diff options
author | Martin Nagy <mnagy@redhat.com> | 2008-05-20 10:19:19 +0200 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2008-05-20 22:43:03 -0400 |
commit | 2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a (patch) | |
tree | 0b294b845149f7decfeb50cbd7970aa05b966d4a | |
parent | fcd3260955f38bda970b6cba16b72b576d727b63 (diff) | |
download | freeipa-2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a.tar.gz freeipa-2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a.tar.xz freeipa-2f69e7e18d2ae41125cf5b3b80e334cd9d88a84a.zip |
Change file mode of log files to 600.
446869
-rw-r--r-- | ipa-client/ipa-install/ipa-client-install | 3 | ||||
-rw-r--r-- | ipa-server/ipaserver/installutils.py | 2 |
2 files changed, 5 insertions, 0 deletions
diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 5355d5685..54d7185a9 100644 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -63,10 +63,12 @@ def logging_setup(options): if options.uninstall: log_file = "/var/log/ipaclient-uninstall.log" + old_umask = os.umask(077) logging.basicConfig(level=logging.DEBUG, format='%(asctime)s %(levelname)s %(message)s', filename=log_file, filemode='w') + os.umask(old_umask) console = logging.StreamHandler() # If the debug option is set, also log debug messages to the console @@ -368,6 +370,7 @@ def main(): try: import sys + import os import krbV import socket import logging diff --git a/ipa-server/ipaserver/installutils.py b/ipa-server/ipaserver/installutils.py index 5eca59714..ee3c1c777 100644 --- a/ipa-server/ipaserver/installutils.py +++ b/ipa-server/ipaserver/installutils.py @@ -143,12 +143,14 @@ def port_available(port): return rv def standard_logging_setup(log_filename, debug=False): + old_umask = os.umask(077) # Always log everything (i.e., DEBUG) to the log # file. logging.basicConfig(level=logging.DEBUG, format='%(asctime)s %(levelname)s %(message)s', filename=log_filename, filemode='w') + os.umask(old_umask) console = logging.StreamHandler() # If the debug option is set, also log debug messages to the console |