[Esa-l]logging options

John D. Hardin jhardin at impsec.org
Wed Aug 1 06:51:27 PDT 2001


On Wed, 1 Aug 2001, Klaus Steden wrote:

> Is there any way to preserve EUID such that output can be written
> to a common log file (i.e. /var/log/procmail) without having to
> open it up to be globally writable? The idea of a globally
> writable log file is making me a little nervous - since that means
> anyone can stuff whatever they want into it, fill disks, etc..

...zero it out...

The only reason that and the quarantine file must be globally writable
is that perl run as root complains about unsafe conditions if you try
to run a script from the command line.

Moving the perl scripts off the command line into separate files will
allof the sanitizer to run as root, letting the permissions on the log
and quarantine files to be tightened down.

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 jhardin at impsec.org        pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  In 1998 more than three times as many people in the US were killed
  by incompetent physicians than were killed by handguns, yet the
  President of the A.M.A. is adopting "gun safety" as his platform.
-----------------------------------------------------------------------
   1189 days until the Presidential Election



More information about the esd-l mailing list