User can view everyone else's log files

[DefHosting]

When a user logs into their ftp space via an ftp client such as cuteftp they can view everyone else's log files. In order to do this you append '_logs' to the username. In other words logging into ftp using:
username = username_logs
password = password

They get a full listing of everyone's log files, can download and view them. This doesn't happen on all accounts just a few.

Any ideas how to patch this up?

[registerpol]

When a user logs into their ftp space via an ftp client such as cuteftp they can view everyone else's log files. In order to do this you append '_logs' to the username. In other words logging into ftp using:
username = username_logs
password = password

They get a full listing of everyone's log files, can download and view them. This doesn't happen on all accounts just a few.

Any ideas how to patch this up?

you are right :-)

[tAzMaNiAc]

Maybe you'd like to send that to cPanel instead of publicly posting that here.

[haze]

If the voices in my head are correct, you can change the CHMOD of the files via tweak settings in WHM. I also have the logs purged each time the logrunner runs.. this way the user can choose to keep those logs themselves and not tie up valuable space.

[myusername]

I think I saw this about a year back and switched to pure_ftp from pro ftp to get rid of that.