From b6d3f8f1fa3013a748eb538f8c2d31936d4188c2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dan=20Hor=C3=A1k?= Date: Wed, 26 Jul 2023 07:31:43 +0000 Subject: [PATCH] provider: use /tmp as logdir The location for storing debug traces of the provider needs to be world writeable. Using the original /var/log/ibmca has security implication, so switch to using /tmp instead. --- configure.ac | 2 +- src/provider/doc/ibmca-provider.man | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/configure.ac b/configure.ac index cea8ce8..57b3205 100644 --- a/configure.ac +++ b/configure.ac @@ -10,7 +10,7 @@ AM_INIT_AUTOMAKE([foreign]) AC_PATH_PROG([CHMOD], [chmod], [/bin/chmod]) -logdir=$localstatedir/log/ibmca +logdir=/tmp AC_SUBST(logdir) # Cmdline arguments. diff --git a/src/provider/doc/ibmca-provider.man b/src/provider/doc/ibmca-provider.man index 52350e4..b3d5174 100644 --- a/src/provider/doc/ibmca-provider.man +++ b/src/provider/doc/ibmca-provider.man @@ -153,7 +153,7 @@ If .B $IBMCA_DEBUG is set to \fBstderr\fP debug output to stderr for the IBMCA provider is enabled. If it is set to \fBon\fP the debug output is written into a trace file in -\fB[/usr/local]/var/log/ibmca/trace-.\fP, where is +\fB[/tmp/trace-.\fP, where is the process ID of the current process. .PP .SH SEE ALSO -- 2.41.0