disinto-admin/disinto
1
0
Fork 0
Code Issues 22 Pull requests 1 Projects Releases Packages Wiki Activity Actions

fix: edge-control: audit log silently never writes — file mode 0640 + group disinto-register denies the writer (#1109) #1112

Merged
disinto-admin merged 1 commit from fix/issue-1109 into main 2026-04-21 13:21:18 +00:00
Conversation 0 Commits 1 Files changed 1 +2 -2
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tools/edge-control/install.sh
View file

@ -181,7 +181,7 @@ chmod 0750 "$LOG_DIR"
# Touch the log file so it exists from day one # Touch the log file so it exists from day one
touch "$LOG_FILE" touch "$LOG_FILE"
chmod 0640 "$LOG_FILE" chmod 0660 "$LOG_FILE"
chown root:disinto-register "$LOG_FILE" chown root:disinto-register "$LOG_FILE"
# Install logrotate config (daily rotation, 30 days retention) # Install logrotate config (daily rotation, 30 days retention)
@ -194,7 +194,7 @@ ${LOG_FILE} {
delaycompress delaycompress
missingok missingok
notifempty notifempty
create 0640 root disinto-register create 0660 root disinto-register
copytruncate copytruncate
} }
EOF EOF