[java-sig-commits] [Bug 790334] New: tomcat-7.0.logrotate should specify "su root tomcat"

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.

Summary: tomcat-7.0.logrotate should specify "su root tomcat"

https://bugzilla.redhat.com/show_bug.cgi?id=790334

           Summary: tomcat-7.0.logrotate should specify "su root tomcat"
           Product: Fedora
           Version: rawhide
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: unspecified
          Priority: unspecified
         Component: tomcat
        AssignedTo: ivan.afonichev at gmail.com
        ReportedBy: martin at martindengler.com
         QAContact: extras-qa at fedoraproject.org
                CC: akurtako at redhat.com,
                    java-sig-commits at lists.fedoraproject.org,
                    ivan.afonichev at gmail.com, kdaniel at redhat.com
    Classification: Fedora
      Story Points: ---
              Type: ---
        Regression: ---
        Mount Type: ---
     Documentation: ---


Description of problem:
Tomcat's logrotate.d file needs to set "su root tomcat" to suppress logrotate
errors like:

error: skipping "/var/log/tomcat6/catalina.out" because parent directory has
insecure permissions (It's world writable or writable by group which is not
"root") Set "su" directive in config file to tell logrotate which user/group
should be used for rotation.


Version-Release number of selected component (if applicable):


How reproducible:

Always


Steps to Reproduce:

1. Install tomcat
2. Run /etc/cron.daily/logrotate


Actual results:


Expected results:

No errors.


Additional info:

Patch to fix is:

diff --git a/tomcat-7.0.logrotate b/tomcat-7.0.logrotate
index a87b4c0..926928a 100644
--- a/tomcat-7.0.logrotate
+++ b/tomcat-7.0.logrotate
@@ -4,5 +4,6 @@
     rotate 52
     compress
     missingok
+    su root tomcat
     create 0644 tomcat tomcat
 }

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.