Users are able to download by FTP other sites logs!

[[Q3]]

Right now,

I've got lot of users complaint about they are able to download every other sites logs.

Is there a way to have the log file in the /home/userfolder instead of /usr/apache/domlogs ????

Regards,

Franco Huard
Simple-net Inc.
http://www.simple-net.ca

[[Q3]]

anyone ?

[deezire]

I am concerned about this also with the account yoursite_logs@yoursite.com anyway to disble this account?

cPanel.net Support Ticket Number:

[Website Rob]

Can someone describe the steps to take, to replicate this problem -- including version of OS and WHM/Cpanel?

cPanel.net Support Ticket Number:

[Cyber911]

Hi,

I have a Problem with this too.
See:
-rw-r----- 1 root username 127844 22. Jun 16:01 domain.tld
-rw-r--r-- 1 root root 8293 22. Jun 16:01 domain.tld-bytes_log
-rw-r--r-- 1 root root 5 22. Jun 13:35 domain.tld-bytes_log.offset
-rw-r----- 1 root username 85 16. Jun 22:43 domain.tld-smtpbytes_log
-rw-r--r-- 1 root root 3 22. Jun 13:35 domain.tld-smtpbytes_log.offset

Every logs user can download the -bytes_log, -bytes_log.offset and -smtpbytes_log.offset
at least the chmod should be changed to -rw-r----- or, which the better idea is I think, move the domlogs to /usr/local/apache/domlogs/username/ and give the logs ftp access only to this directory.

Cause I think it's not good to let everyone see which domains are hosted on that server and how big the transferlogs are...

P.S.: I hope it's correct not to start a new thread and posting to this one instead.

MfG

Sven B. 8)

cPanel.net Support Ticket Number: