From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8) Gecko/20020206 Description of problem: webalizer should not run by default the admin should trigger something to enable it in /etc/sysconfig/webalizer RUN=yes Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: 1. install webalizer 2. 3. Actual Results: webalizer is run Expected Results: should run only once configured in /etc/sysconfig/webalizer RUN=yes OR in /etc/cron.daily/00webalizer ... # mkdir /var/www/html/usage to enable if [ -s /var/log/httpd/access_log -a -d /var/www/html/usage] ; then ... OR in webalizer.conf, make dir /var/www/usage and note that 'alias /usage /var/www/usage' must be added to httpd.conf Additional info: I myself normally wouldn't normally install webalizer, but I have a 'build machine' where everything is installed. This is how I noticed it. Many people might be doing a full install or other option that installs this, not realizing they are revealing to the whole world their stats. marking as 'security', but 'enhancement' might be better.
i added a function in /etc/cron.daily/00webalizer to check RUN enviroment. It's enable as default for compatibility. In your case you should add RUN=no into /etc/sysconfig/webalizer/ to disable it.