OJS v3.3.0-8 – creates world-writable log files in $files_dir/scheduledTaskLogs

Software Support
1

Description of issue or problem I’m having:

Our nightly system check discovered world-writeable files in $files_dir/scheduledTaskLogs, namely:

  • ReviewReminder-61f9186fa293c-20220201.log
  • CrossRefautomaticregistrationtask-61f9186f8d3d5-20220201.log
  • DataCiteautomaticregistrationtask-61f9186f88e9b-20220201.log
  • DOAJautomaticregistrationtask-61f9186f84143-20220201.log

Steps I took leading up to the issue:

None that we are aware of.

What I tried to resolve the issue:

I checked the $umask setting in config.inc.php, but it is “0022”.

Application Version - e.g., OJS 3.1.2:

OJS v3.3.0-8 running on a Debian v11.2 (“buster”) LAMP system, using

  • Linux v5.10.0-9-amd64
  • Apache v2.4.52-1~deb11u2
  • PHP v7.4.25 (via php-fpm, not mod_php)
  • MariaDB v10.5.12-MariaDB-0+deb11u1 (using the ‘mysql’ driver)

Additional information, such as screenshots and error log messages if applicable:

There are other logfiles, which have been created earlier as well as later than the offending ones, and the permissions of these are correct (i.e., user and group “ojs” and mode 0644).

Thanks for looking into this!

1 Like