apache log files are user-readable

With SuSE 6.3, apache creates its logfiles in /var/log with permissions 644, which is not really on. Access logs shouldn't be available to all users, at least not by default. Add this to /etc/permissons.local and run chkstat -set /etc/permissions.local # apache #Change the www for http.conf to root if you haven't created a www group. /etc/local/httpd.conf root.www 640 /var/log/httpd.access_log root.root 600 /var/log/httpd.error_log root.root 600 Volker