+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: Log security compromised warning during setup (/thread-10286.html)
Log security compromised warning during setup - NaturalEnquirer - 2012-08-10
During setup I get this error:
Log security [is compromised]
Warning!
Zenphoto attempts to make log files accessable by owner only (permissions = 0600). This attempt has failed. The log file permissions are 0604 which may allow unauthorized access.
I understand how to change permissions, but which log files in what folder are we talking about?
Log security compromised warning during setup - fretzl - 2012-08-10
The log files in the zp-data folder.
Log security compromised warning during setup - NaturalEnquirer - 2012-08-10
Thank you. Location may be obvious to techies, but perhaps should clarify that in the docs or error message.
Log security compromised warning during setup - acrylian - 2012-08-10
It is all mentioned on our installation page btw:
http://www.zenphoto.org/news/installation-and-upgrading
Log security compromised warning during setup - yanzen - 2013-03-13
I'm having the same problem and as NaturalEnquirer I think that it would be helpful if the exact files/paths in question could be mentioned in the warning.
Log security compromised warning during setup - MumblingFumbler - 2013-06-20
It is not "all mentioned" on your installation page. You need to enumerate the files. For instance, you don't mention that zenphoto.cfg, clearly not a log file, also needs to have 600 permissions before the warning will go away. Why make it so difficult for your users? It would all of 30 seconds to put that in your instructions.
Log security compromised warning during setup - acrylian - 2013-06-20
Properly configured servers do all this for the user. I personally never encountered these issuse on any standard shared hosting server.
There is a lengthly article about permissions:
http://www.zenphoto.org/news/permissions-for-zenphoto-files-and-folders
Log security compromised warning during setup - MumblingFumbler - 2013-06-20
I'm currently suffering through an upgrade, which in the instructions is touted as being "super easy". As part of the setup checks, there is a warning with the list of obsolete files for the user to delete. The setup script is aware of these files--why doesn't it just do the deletions automatically, or at least allow that as an option? Perhaps if the implementor went through the process of deleting these manually, he/she would realize what a pain this is.
Log security compromised warning during setup - MumblingFumbler - 2013-06-20
Apologies. I see that there was an option to delete the files at the bottom of the long list. I didn't see it until I had already started the deletion process. It did not remove all of the files.
Log security compromised warning during setup - MumblingFumbler - 2013-06-20
Suggestion--Put the delete button at the top of the list where it could be seen without scrolling
Log security compromised warning during setup - acrylian - 2013-06-20
Please open a ticket on the issue tracker. Forum posts get easily lost.