Home› General support

Log security compromised warning during setup

NaturalEnquirer Member
in General support
During setup I get this error:

Log security [is compromised]
Warning!
Zenphoto attempts to make log files accessable by owner only (permissions = 0600). This attempt has failed. The log file permissions are 0604 which may allow unauthorized access.

I understand how to change permissions, but which log files in what folder are we talking about?

Comments

  • fretzl Administrator, Developer
    The log files in the `zp-data` folder.
  • NaturalEnquirer Member
    Thank you. Location may be obvious to techies, but perhaps should clarify that in the docs or error message.
  • acrylian Administrator, Developer
    It is all mentioned on our installation page btw:
    http://www.zenphoto.org/news/installation-and-upgrading
  • yanzen Member
    I'm having the same problem and as NaturalEnquirer I think that it would be helpful if the exact files/paths in question could be mentioned in the warning.
  • MumblingFumbler Member
    It is *not* "all mentioned" on your installation page. You need to enumerate the files. For instance, you don't mention that zenphoto.cfg, clearly not a log file, also needs to have 600 permissions before the warning will go away. Why make it so difficult for your users? It would all of 30 seconds to put that in your instructions.
  • acrylian Administrator, Developer
    Properly configured servers do all this for the user. I personally never encountered these issuse on any standard shared hosting server.

    There is a lengthly article about permissions:
    http://www.zenphoto.org/news/permissions-for-zenphoto-files-and-folders
  • MumblingFumbler Member
    I'm currently suffering through an upgrade, which in the instructions is touted as being "super easy". As part of the setup checks, there is a warning with the list of obsolete files for the user to delete. The setup script is aware of these files--why doesn't it just do the deletions automatically, or at least allow that as an option? Perhaps if the implementor went through the process of deleting these manually, he/she would realize what a pain this is.
  • MumblingFumbler Member
    Apologies. I see that there was an option to delete the files at the *bottom* of the long list. I didn't see it until I had already started the deletion process. It did not remove all of the files.
  • MumblingFumbler Member
    Suggestion--Put the delete button at the top of the list where it could be seen without scrolling
  • acrylian Administrator, Developer
    Please open a ticket on the issue tracker. Forum posts get easily lost.
Sign In or Register to comment.