Bug 1624234

Summary: Cobbler's Logrotate file missing su directive
Product: [Community] Spacewalk Reporter: Eric Burgueño <nevermind85>
Component: ServerAssignee: Tomáš Kašpárek <tkasparek>
Status: CLOSED CURRENTRELEASE QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 2.8CC: fedoraproject.org, jacek.kowalski, mmraka, skutzke
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: cobber20-2.0.11-93 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-19 12:16:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1802137    

Description Eric Burgueño 2018-08-31 04:48:52 UTC
Description of problem:
I am getting the following errors from logrotate:

error: skipping "/var/log/cobbler/cobbler.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
error: skipping "/var/log/cobbler/tasks/*.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
error: skipping "/var/log/cobbler/install.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

# ll -d /var/log/cobbler/
drwxrwxr-x. 6 root apache 4096 Aug 10 04:25 /var/log/cobbler/

# ll /var/log/cobbler/
total 36
drwxr-xr-x. 2 root root    4096 Aug 10 04:25 anamon
-rw-r--r--. 1 root root   19296 Aug 30 13:06 cobbler.log
drwxrwxr-x. 2 root apache  4096 Aug 10 04:25 kicklog
drwxr-xr-x. 2 root root    4096 Aug 10 04:25 syslog
drwxrwxr-x. 2 root apache  4096 Aug 10 04:25 tasks


Version-Release number of selected component (if applicable):

# rpm -qa|grep cobbler
cobbler20-2.0.11-78.el7.noarch


How reproducible: always

Comment 1 Stefan Bluhm 2019-01-16 15:30:00 UTC
Fixed in PR2:
https://github.com/spacewalkproject/cobbler/pull/2

Comment 2 Stefan Bluhm 2019-01-16 15:31:27 UTC
note, this also shows up in Spacewalk 2.9.

Comment 3 Stefan Bluhm 2019-10-16 09:00:56 UTC
This has been fixed in the latest Master

Comment 5 Michael Mráka 2020-03-11 10:15:46 UTC
*** Bug 1725122 has been marked as a duplicate of this bug. ***

Comment 6 Michael Mráka 2020-03-19 12:16:07 UTC
Spacewalk 2.10 has been released.
https://github.com/spacewalkproject/spacewalk/wiki/ReleaseNotes210