Bug 1431485 – openstack-zaqar: /var/log/zaqar is world readable

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1431485 - openstack-zaqar: /var/log/zaqar is world readable

Summary:	openstack-zaqar: /var/log/zaqar is world readable

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	openstack-zaqar (Show other bugs)
Sub Component:
Version:	11.0 (Ocata)
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	beta
Target Release:	11.0 (Ocata)
Assigned To:	Thomas Hervé
QA Contact:	Shai Revivo
Docs Contact:

URL:
Whiteboard:
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-03-12 21:16 EDT by Summer Long
Modified:	2017-05-17 16:07 EDT (History)
CC List:	15 users (show)

See Also:
Fixed In Version:	openstack-zaqar-4.0.0-2.el7ost
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:	1431484
Clones:	1431487 (view as bug list)
Environment:
Last Closed:	2017-05-17 16:07:03 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
RDO	5260	None	None	None	2017-04-05 10:15 EDT
RDO	6174	None	None	None	2017-04-05 10:19 EDT
Red Hat Product Errata	RHEA-2017:1245	normal	SHIPPED_LIVE	Red Hat OpenStack Platform 11.0 Bug Fix and Enhancement Advisory	2017-05-17 19:01:50 EDT

Groups: None (edit)

Description Summer Long 2017-03-12 21:16:22 EDT

Description of problem:
The directory /var/log/zaqar is world readable and contains log files that are readable, which can result in the exposure of sensitive information. The 'other readable/execute' bits need to be removed from the /var/log/zaqar directory.

Because no sensitive data was found in the files, this is being raised as a hardening bug, and not a flaw.

Version-Release number of selected component (if applicable):
openstack-zaqar-4.0.0-1.el7ost

Comment 2 errata-xmlrpc 2017-05-17 16:07:03 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:1245

Note You need to log in before you can comment on or make changes to this bug.