[pkg-lighttpd] Bug#398834: lighttpd: /var/log/ligghtpd/*.log is world-readble

[Olaf van der Spek]

Package: lighttpd
Version: 1.4.13-4
Severity: normal

Hi,

# ls -al /var/log/lighttpd/
total 12
drwxr-xr-x 2 www-data www-data 4096 2006-11-15 21:29 .
drwxr-xr-x 9 root     root     4096 2006-11-15 21:31 ..
-rw-r--r-- 1 www-data www-data    0 2006-11-15 21:29 access.log
-rw-r--r-- 1 www-data www-data   97 2006-11-15 21:30 error.log

The logs shouldn't be world-readable.

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-486
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages lighttpd depends on:
ii  libattr1                    2.4.32-1     Extended attribute shared library
ii  libbz2-1.0                  1.0.3-6      high-quality block-sorting file co
ii  libc6                       2.3.6.ds1-7  GNU C Library: Shared libraries
ii  libldap2                    2.1.30-13+b1 OpenLDAP libraries
ii  libpcre3                    6.7-1        Perl 5 Compatible Regular Expressi
ii  libssl0.9.8                 0.9.8c-3     SSL shared libraries
ii  lsb-base                    3.1-15       Linux Standard Base 3.1 init scrip
ii  mime-support                3.37-1       MIME files 'mime.types' & 'mailcap
ii  zlib1g                      1:1.2.3-13   compression library - runtime

Versions of packages lighttpd recommends:
pn  php4-cgi | php5-cgi           <none>     (no description available)

-- no debconf information