Bug 1329573
| Summary: | Candlepin logrotate error on RHEL6 | |||
|---|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Peter Vreman <peter.vreman> | |
| Component: | Candlepin | Assignee: | satellite6-bugs <satellite6-bugs> | |
| Status: | CLOSED ERRATA | QA Contact: | Katello QA List <katello-qa-list> | |
| Severity: | high | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 6.1.8 | CC: | bbuckingham, bkearney, cwelton, ehelms, sthirugn, vrjain | |
| Target Milestone: | Unspecified | Keywords: | Triaged | |
| Target Release: | Unused | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | candlepin-0.9.54.7-1 | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 1330244 1351652 (view as bug list) | Environment: | ||
| Last Closed: | 2016-07-27 11:18:47 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1330244 | |||
| Bug Blocks: | 1122832, 1351652 | |||
|
Description
Peter Vreman
2016-04-22 09:37:38 UTC
RHEL6.7 provides:
vrempet@li-lc-1578 ~
$ rpm -q logrotate
logrotate-3.7.8-26.el6_7.x86_64
The used 'su' command is only introduced in 3.8.0 of logrotate:
3.7.9 -> 3.8.0
- added "dateyesterday" option (see man page)
- fixed crash when config file had exactly 4096*N bytes
- added WITH_ACL make option to link against -lacl and preserve ACLs
during rotation
- added "su" option to define user/group for rotation. Logrotate now
skips directories which are world writable or writable by group
which is not "root" unless "su" directive is used.
- fixed CVE-2011-1098: race condition by creation of new files
- fixed possible shell injection when using "shred" directive (CVE-2011-1154)
- fixed escaping of file names within 'write state' action (CVE-2011-1155)
- better 'size' directive description
- fixed possible buffer-overflow when reading config files
- NetBSD/FreeBSD compilation fixes
- Solaris compilation fixes
*** Bug 1343758 has been marked as a duplicate of this bug. *** This is NOT correctly fixed yet in Sat6.2.0 Beta2.
There is logic in the logrotate file, but somehow it is not working the su line is still kept active:
[crash] root@li-lc-1578:~# rpm -q candlepin
candlepin-0.9.54.6-1.el6.noarch
[crash] root@li-lc-1578:~# cat /etc/logrotate.d/candlepin
/var/log/candlepin/*.log {
# logrotate 3.8 requires the su directive,
# where as prior versions do not recognize it.
#LOGROTATE-3.8# su tomcat tomcat
su tomcat tomcat
copytruncate
daily
rotate 52
compress
missingok
create 0644 tomcat tomcat
}
Ehelms, my bad, I have updated the fixed in version appropriately. does this mean we need to revert the state of this bug, or is candlepin-0.9.54.7-1 in a build already? Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1501 |