Bug with keeping logs?

Correct, that's why I find it strange that it got to user:user on a default install.

But I remember on another fresh install that I've seen it also as root:root. I don't get it anymore.:)
 
The logs are owned by root, that's not the problem.
The problem is that the logs directory is sometimes owned by root and sometimes by the user.

There is another flaw by the way, being that a client can read any other client's logs in /var/log/httpd/domains/domain*.log when they know the domain name. Which should not be hard to get.
 
That would be better indeed. This way not only users but also hackers when they hack the user account can't delete them.

Any thoughts about any customer can read another customers domain log at
/var/log/httpd/domains/domain*.log?
Maybe these can be chmod to 640? Or is this an OS issue?
 
That's strange then. At all 4 DA servers i just checked and its 755 for directory and 644 on logs. Even the newly setup DA server:
drwxr-xr-x 3 root root 4.0K Dec 5 04:04 httpd
-rw-r--r-- 1 root root 1.2K Dec 5 18:56 access_log
 
Directadmin doesn't change rights for directories in /var/log/.
It's up to administrator to change them, I suppose.
 
I just checked the installer, and can confirm zEitEr's findings.
I've added a chmod 700 /var/log/httpd to the installer.

John
 
Great Johan, thank you!

Could you help me with a command to change all logs directory's in the /home/*/domains/*/logs backup to root:user?

I have:
/home | grep '^d' | awk '{system("chown -R " $3 ":" $4 " /home/" $4 "/domains")}'
Click to expand...
But this changes all directory's to user:user, I only need the logs directory to be changed and I'm no good with grep.
 
Last edited:
Not in one line, but still working code:

Code: 
for username in `ls -1 /usr/home/`;
do
    if [ -d "/usr/home/${username}/domains/" ]; then
        chmod 750 /usr/home/${username}/domains/*/logs/
        chown root:${username} /usr/home/${username}/domains/*/logs/
    fi;
done;
 
One line code:

Code: 
ls -l /home/ | grep '^d' | awk '{system("chown root:" $4 " /home/" $4 "/domains/*/logs; chmod 750 /home/" $4 "/domains/*/logs")}'
 
I'm getting back to my question.
Using the line zEitEr gave me, it is oke.

But where do I have to change which code so this works also when new accounts are created by DA?
Because I recently added a few new accounts and the logs directory is again like this:
drwx------ 2 username username 5 4.0K Dec 30 00:10 logs

and should be
drwxr-x--- 2 root username 4.0K Dec 30 00:10 logs

So I would need to make a custom setting somehwere?
 
If it's not fixed in directadmin binary, you can use /usr/local/directadmin/scripts/custom/domain_create_post.sh to fit your needs.

Create it, if not existed, and put there something like:

Code: 
#!/bin/sh
chmod 750 /home/${username}/domains/${domain}/logs
chown 0:${username} /home/${username}/domains/${domain}/logs
 
I already got a domain_create_post there:
#!/bin/sh
FILE=/etc/virtual/$domain/filter.conf
if [ -e "$FILE" ]; then
echo "high_score=15" >> $FILE
echo "high_score_block=yes" >> $FILE
echo "where=delete" >> $FILE
echo "action=rewrite&value=filter&user=$username" >> /usr/local/directadmin/data/task.queue
fi
exit 0;
Click to expand...

Can I just put both lines between the "fi" and the "exit 0;"?
Like this?
#!/bin/sh
FILE=/etc/virtual/$domain/filter.conf
if [ -e "$FILE" ]; then
echo "high_score=15" >> $FILE
echo "high_score_block=yes" >> $FILE
echo "where=delete" >> $FILE
echo "action=rewrite&value=filter&user=$username" >> /usr/local/directadmin/data/task.queue
fi
chmod 750 /home/${username}/domains/${domain}/logs
chown 0:${username} /home/${username}/domains/${domain}/logs
exit 0;
Click to expand...
Or can I better put them on top, before the FILE statement?
 
I have to come back at this.
I don't know why, but the logs and stats directory are not created anymore when a new user is created, not even when I remove the new lines.

Next to that I've seen another thing.
drwxr-xr-x 2 lupaie lupaie 4.0K Jan 22 21:16 .htpasswd
drwx--x--x 3 lupaie lupaie 4.0K Jan 22 21:16 public_ftp
drwxr-xr-x 6 lupaie lupaie 4.0K Jan 22 21:25 public_html

On the other accounts, the public_html has the same rights as the public_ftp here.
So should be 711 instead of 755.
How can this be fixed? For new and existing users.
 
You must log in or register to reply here.
Back
Top