[JIRA] Commented: (SSPCPP-494) Shibboleth-SP RPM performs bulk right changes in the log directory

[Olivier Salaun (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-494?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14322#comment-14322 ] 

Olivier Salaun commented on SSPCPP-494:
---------------------------------------

Hi Scott,

A warning on the RPM install page will be fine.

Thanks.

> Shibboleth-SP RPM performs bulk right changes in the log directory
> ------------------------------------------------------------------
>
>                 Key: SSPCPP-494
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-494
>             Project: Shibboleth SP - C++
>          Issue Type: Improvement
>      Security Level: Standard(Standard bug, may impact functionality but does not represent a security vulnerability ) 
>          Components: Logging
>    Affects Versions: 2.5.0
>            Reporter: Olivier Salaun
>            Assignee: Scott Cantor
>            Priority: Minor
>   Original Estimate: 1 hour
>  Remaining Estimate: 1 hour
>
> We have a server running both the Shibboleth SP and IdP. IdP has been configured to log in the same directory as the SP (/var/log/shibboleth).
> A recent update of the Shibboleth SP changed the ownership of all /var/log/shibboleth/* files including the IdP log files. Therefore the IdP stopped logging until we found out the problem.
> It seems that the RPM did this on purpose, cf the SPEC file :
> # Fix ownership of log files (even on new installs, if they're left from an older one).
> %{__chown} %{runuser}:%{runuser} %{_localstatedir}/log/shibboleth/* 2>/dev/null || :
> I'd suggest removing this from the SPEC file or make it more targeted to preserve other existing files that might be in the same directory.
> Thanks.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira