Fixed: FS#2793 - Security issue /var/log/ispconfig/cron.log

tbrehm

2013-03-20 5f0b1d05e45417aa5b3288b9b901f59bc13c45dc

Fixed: FS#2793 - Security issue /var/log/ispconfig/cron.log

 install/dist/lib/fedora.lib.php

@@ -1228,7 +1228,7 @@
            $existing_cron_jobs = file('crontab.txt');
        
            $cron_jobs = array(
                '*/5 * * * * /usr/local/bin/run-getmail.sh > /dev/null 2>> /var/log/ispconfig/cron.log'
                '*/5 * * * * /usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null'
            );
        
            // remove existing ispconfig cronjobs, in case the syntax has changed
@@ -1247,7 +1247,7 @@
        }
        
        exec('touch /var/log/ispconfig/cron.log');
        exec('chmod 666 /var/log/ispconfig/cron.log');
        exec('chmod 660 /var/log/ispconfig/cron.log');
    }

}

 install/dist/lib/opensuse.lib.php

@@ -1280,7 +1280,7 @@
            $existing_cron_jobs = file('crontab.txt');
        
            $cron_jobs = array(
                '*/5 * * * * /usr/local/bin/run-getmail.sh > /dev/null 2>> /var/log/ispconfig/cron.log'
                '*/5 * * * * /usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null'
            );
        
            // remove existing ispconfig cronjobs, in case the syntax has changed
@@ -1299,7 +1299,7 @@
        }
        
        exec('touch /var/log/ispconfig/cron.log');
        exec('chmod 666 /var/log/ispconfig/cron.log');
        exec('chmod 660 /var/log/ispconfig/cron.log');
    }

}

 install/lib/installer_base.lib.php

@@ -2122,7 +2122,7 @@
            $existing_cron_jobs = file('crontab.txt');

            $cron_jobs = array(
                    '*/5 * * * * /usr/local/bin/run-getmail.sh > /dev/null 2>> '.$conf['ispconfig_log_dir'].'/cron.log'
                    '*/5 * * * * /usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null'
            );

            // remove existing ispconfig cronjobs, in case the syntax has changed
@@ -2141,7 +2141,7 @@
        }

        touch($conf['ispconfig_log_dir'].'/cron.log');
        chmod($conf['ispconfig_log_dir'].'/cron.log', 0666);
        chmod($conf['ispconfig_log_dir'].'/cron.log', 0660);

    }