Page 1 of 1

Bad rights to log files

Posted: Thu Jun 22, 2017 1:30 pm
by gecube_ru
Good day, colleagues!

I really very appreciate the Vesta panel. It is the most lightweight and powerful panel for server management I have ever seen.
But it has some pecularities as every pre-release product.

I want to point the strange things about log file permissions.
The steps to reproduce:
  • Install Centos 7 from original ISO
  • Install Vesta (nginx + apache)
  • create sites under admin user
  • Look at permissions on log files:
    /var/log/httpd/domains/*.log - they are <nginx>:<admin> and rights as 640
  • I checked the v-add-web-domain script and it looks like it must create files with owner as <root>:<$user>.
  • OK. Let's try to make some destruction. We will remove log file and restart (or reload) httpd (apache) server. It will re-create log file with <root>:<root> owner and rights as 751.
It is totally disappointing. Because of the security and the logic. I don't like allow different users of server to read not their's sites logs. Also the ownership and rights are not correctly set when the log file was accidentally deleted.