Kouhei Sutou 2019-05-05 05:49:20 +0900 (Sun, 05 May 2019) Revision: 0682a55cb6a4cc44f2dc857c1b2c25ffcd47210d https://github.com/groonga/groonga/commit/0682a55cb6a4cc44f2dc857c1b2c25ffcd47210d Message: groonga-httpd logrotate: use groonga user Debian: 928304 CVE: 2019-11675 Reported by Wolfgang Hotwagner. Thanks!!! Modified files: data/logrotate.d/centos/groonga-httpd.in packages/debian/groonga-httpd.logrotate Modified: data/logrotate.d/centos/groonga-httpd.in (+1 -0) =================================================================== --- data/logrotate.d/centos/groonga-httpd.in 2019-04-29 06:24:04 +0900 (a17b8aa2b) +++ data/logrotate.d/centos/groonga-httpd.in 2019-05-05 05:49:20 +0900 (8c19a3db8) @@ -1,4 +1,5 @@ /var/log/groonga/httpd/*.log { + su groonga groonga daily missingok rotate 30 Modified: packages/debian/groonga-httpd.logrotate (+1 -1) =================================================================== --- packages/debian/groonga-httpd.logrotate 2019-04-29 06:24:04 +0900 (018f546a6) +++ packages/debian/groonga-httpd.logrotate 2019-05-05 05:49:20 +0900 (cf124b073) @@ -1,11 +1,11 @@ /var/log/groonga/httpd/*.log { + su groonga groonga daily missingok rotate 30 compress delaycompress notifempty - create 640 groonga groonga sharedscripts postrotate . /etc/default/groonga-httpd -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.osdn.me/mailman/archives/groonga-commit/attachments/20190505/0f55e54e/attachment-0001.html>