The directory /var/log/glance is world readable and contains log files that are readable which can result in exposure of sensitive information. We need to remove the "other readable/execute" bits from the /var/log/glance directory [root@rhos log]# ls -la /var/log/glance/ total 364 drwxr-xr-x. 2 glance glance 4096 Apr 24 21:37 . drwxr-xr-x. 22 root root 4096 Apr 24 21:37 .. -rw-r--r--. 1 glance glance 175180 Apr 24 21:56 api.log -rw-r--r--. 1 glance glance 175078 Apr 24 21:56 registry.log -rw-r--r--. 1 glance glance 663 Apr 24 21:37 scrubber.log At this time this is a security hardening issue.
Created openstack-glance tracking bugs for this issue Affects: epel-6 [bug 956810]
Created openstack-glance tracking bugs for this issue Affects: fedora-all [bug 956815]
openstack-glance-2013.1.4-2.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
openstack-glance-2013.2.1-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.