Users are able to download by FTP other sites logs!

[Q3]

Member
Apr 8, 2003
14
0
151
Right now,

I've got lot of users complaint about they are able to download every other sites logs.

Is there a way to have the log file in the /home/userfolder instead of /usr/apache/domlogs ????

Regards,

Franco Huard
Simple-net Inc.
http://www.simple-net.ca
 

Website Rob

Well-Known Member
Mar 23, 2002
1,501
1
318
Alberta, Canada
cPanel Access Level
Root Administrator
Can someone describe the steps to take, to replicate this problem -- including version of OS and WHM/Cpanel?

cPanel.net Support Ticket Number:
 

Cyber911

Active Member
May 24, 2003
25
0
151
Hi,

I have a Problem with this too.
See:
-rw-r----- 1 root username 127844 22. Jun 16:01 domain.tld
-rw-r--r-- 1 root root 8293 22. Jun 16:01 domain.tld-bytes_log
-rw-r--r-- 1 root root 5 22. Jun 13:35 domain.tld-bytes_log.offset
-rw-r----- 1 root username 85 16. Jun 22:43 domain.tld-smtpbytes_log
-rw-r--r-- 1 root root 3 22. Jun 13:35 domain.tld-smtpbytes_log.offset

Every logs user can download the -bytes_log, -bytes_log.offset and -smtpbytes_log.offset
at least the chmod should be changed to -rw-r----- or, which the better idea is I think, move the domlogs to /usr/local/apache/domlogs/username/ and give the logs ftp access only to this directory.

Cause I think it's not good to let everyone see which domains are hosted on that server and how big the transferlogs are...

P.S.: I hope it's correct not to start a new thread and posting to this one instead.

MfG

Sven B. 8)

cPanel.net Support Ticket Number: