[JIRA] Created: (SSPCPP-494) Shibboleth-SP RPM performs bulk right changes in the log directory

[Olivier Salaun (JIRA)]

Shibboleth-SP RPM performs bulk right changes in the log directory
------------------------------------------------------------------

                 Key: SSPCPP-494
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-494
             Project: Shibboleth SP - C++
          Issue Type: Improvement
      Security Level: Standard (Standard bug, may impact functionality but does not represent a security vulnerability )
          Components: Logging
    Affects Versions: 2.5.0
            Reporter: Olivier Salaun
            Assignee: Scott Cantor
            Priority: Minor


We have a server running both the Shibboleth SP and IdP. IdP has been configured to log in the same directory as the SP (/var/log/shibboleth).

A recent update of the Shibboleth SP changed the ownership of all /var/log/shibboleth/* files including the IdP log files. Therefore the IdP stopped logging until we found out the problem.

It seems that the RPM did this on purpose, cf the SPEC file :
# Fix ownership of log files (even on new installs, if they're left from an older one).
%{__chown} %{runuser}:%{runuser} %{_localstatedir}/log/shibboleth/* 2>/dev/null || :

I'd suggest removing this from the SPEC file or make it more targeted to preserve other existing files that might be in the same directory.

Thanks.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira