Skip to content

fix(gorgone): reduce log file permissions#3190

Open
Evan-Adam wants to merge 2 commits intodevelopfrom
MON-192925-password-leaks-in-gorgone-debug-log
Open

fix(gorgone): reduce log file permissions#3190
Evan-Adam wants to merge 2 commits intodevelopfrom
MON-192925-password-leaks-in-gorgone-debug-log

Conversation

@Evan-Adam
Copy link
Copy Markdown
Contributor

Description

set gorgone log permissions to 640 instead of 644

Fixes # MON-192925

Type of change

  • Patch fixing an issue (non-breaking change)
  • New functionality (non-breaking change)
  • Breaking change (patch or feature) that might cause side effects breaking part of the Software
  • Updating documentation (missing information, typo...)

Target serie

  • 23.10.x
  • 24.04.x
  • 24.10.x
  • 25.10.x
  • master

How this pull request can be tested ?

need to test both update and new install : log file should be 640 in both case.

Checklist

  • I have followed the coding style guidelines provided by Centreon
  • I have commented my code, especially new classes, functions or any legacy code modified. (docblock)
  • I have commented my code, especially hard-to-understand areas of the PR.
  • I have made corresponding changes to the documentation.
  • I have rebased my development branch on the base branch (master, maintenance).

@Evan-Adam Evan-Adam requested review from a team as code owners February 18, 2026 10:09
@Evan-Adam Evan-Adam added the upload-artifacts force nfpm to upload every package built as an artifact label Feb 18, 2026
@Evan-Adam Evan-Adam requested a review from scresto31 February 18, 2026 10:09
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Feb 18, 2026

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)
  • coderabbit

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch MON-192925-password-leaks-in-gorgone-debug-log

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Feb 18, 2026

Logo
Checkmarx One – Scan Summary & Detailsc2a5dbb9-1620-4ddf-8bc5-bf13376849c0


New Issues (2) Checkmarx found the following issues in this Pull Request
# Severity Issue Source File / Package Checkmarx Insight
1 CRITICAL CVE-2026-2750 Php-centreon/centreon-22.10.2
detailsDescription: Improper Input Validation vulnerability in Centreon/Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue aff...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package
2 HIGH CVE-2026-2751 Php-centreon/centreon-22.10.2
detailsDescription: Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux ...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package

$self->{severity} = 6;
} elsif ($input_severity eq "debug") {
$self->{severity} = 7;
}elsif ($input_severity eq "trace") {
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
}elsif ($input_severity eq "trace") {
} elsif ($input_severity eq "trace") {

@Tpo76
Copy link
Copy Markdown
Contributor

Tpo76 commented Apr 15, 2026

🤖 This is an automatic comment generated by an internal tool.

Complexity Classification: Standard

Justification: Automatic classification failed; defaulting to standard.

Metric Value
WIP Points 2
SLA Track Standard SLA (2 work days)
First review SLA 1 work day

A maintainer can override this classification at any time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants