tinyproxy world writable logfile
Open
Nobody has claimed this yet.
bug
stale
- Dominant language
- Makefile
- Stars
- 4.6k
- Forks
- 4k
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 134
Description
Maintainer: @jow-
Environment:
DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='SNAPSHOT'
DISTRIB_REVISION='r15520-54bfebdca0'
DISTRIB_TARGET='ipq40xx/generic'
DISTRIB_ARCH='arm_cortex-a7_neon-vfpv4'
DISTRIB_DESCRIPTION='OpenWrt SNAPSHOT r15520-54bfebdca0'
DISTRIB_TAINTS='no-all busybox'
Description:
/etc/init.d/tinyproxy creates /var/log/tinyproxy.log with mode 666 (world writable)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the /etc/init.d/tinyproxy entry point and inspect how it creates /var/log/tinyproxy.log. Change the log file permissions so it is not world writable, then verify the resulting mode in an OpenWrt environment or relevant package test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, shell
- Domain
- security
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100