Unified logging security update

During an upgrade to NetBackup 10.0.0.1, the permissions on the unified log directories and files are set to a more restrictive level. This change is designed to prevent unauthorized access to the NetBackup logs, which may contain sensitive information.

You can change log file permissions to the less restrictive setting by changing ALLOW_WORLD_READABLE_LOGS to YES. If you want to retain the less restrictive log permissions during the NetBackup 10.0.0.1 upgrade, set ALLOW_WORLD_READABLE_LOGS=YES with the nbsetconfig command before you upgrade.

For UNIX and Linux upgrades, if ALLOW_WORLD_READABLE_LOGS=YES is set in bp.conf for a server, the log file permissions for nblog.conf are 644. The permissions for icsul.conf are not changed since they are already 640. The new permissions are only applied to newly created log files. The permissions of existing log files before upgrade are not changed.

See the NetBackup Commands Reference Guide for assistance with the nbsetconfig command.

See the NetBackup Logging Reference Guide for additional information about the ALLOW_WORLD_READABLE_LOGS value.