#217: add umask sysconfig variable for sa1 and sa2

diff --git a/sa1.in b/sa1.in
index 6dca6168364fcee1cc14d49e1c66ba947047bb15..79ed60c6f574e83d8a73f9611c06df7622f860d2 100644 (file)
--- a/sa1.in
+++ b/sa1.in
@@ -12,9 +12,12 @@ HISTORY=0
 SADC_OPTIONS=""
 SA_DIR=@SA_DIR@
 SYSCONFIG_DIR=@SYSCONFIG_DIR@
-umask 0022
+UMASK=0022
 
 [ -r ${SYSCONFIG_DIR}/sysstat ] && . ${SYSCONFIG_DIR}/sysstat
+
+umask ${UMASK}
+
 [ -d ${SA_DIR} ] || SA_DIR=@SA_DIR@
 
 if [ ${HISTORY} -gt 28 ]

diff --git a/sa2.in b/sa2.in
index 4d48aeadd92f4ec80bdd87b90cb51e46faadd9e2..cd4f71f00911e04e04f7be475384f1a91f9308e7 100644 (file)
--- a/sa2.in
+++ b/sa2.in
@@ -6,7 +6,6 @@
 #@(#) sa2: Write a daily report
 #
 S_TIME_FORMAT=ISO ; export S_TIME_FORMAT
-umask 0022
 prefix=@prefix@
 exec_prefix=@exec_prefix@
 SA_DIR=@SA_DIR@
@@ -14,10 +13,13 @@ SYSCONFIG_DIR=@SYSCONFIG_DIR@
 HISTORY=@HISTORY@
 COMPRESSAFTER=@COMPRESSAFTER@
 ZIP="@ZIP@"
+UMASK=0022
 
 # Read configuration file, overriding variables set above
 [ -r ${SYSCONFIG_DIR}/sysstat ] && . ${SYSCONFIG_DIR}/sysstat
 
+umask ${UMASK}
+
 [ -d ${SA_DIR} ] || SA_DIR=@SA_DIR@
 
 # if YESTERDAY=no then today's summary is generated

diff --git a/sysstat.sysconfig.in b/sysstat.sysconfig.in
index 796da1f66efdaadab549ac571ad889fcd4c29ec1..69e4d17420763cb87300bfec94578e479794f82d 100644 (file)
--- a/sysstat.sysconfig.in
+++ b/sysstat.sysconfig.in
@@ -26,3 +26,10 @@ ZIP="@ZIP@"
 # By default sa2 script generates reports files (the so called sarDD files).
 # Set this variable to false to disable reports generation.
 #REPORTS=false
+
+# The sa1 and sa2 scripts generate system activity data and report files in
+# the @SA_DIR@ directory. By default the files are created with umask 0022
+# and are therefore readable for all users. Change this variable to restrict
+# the permissions on the files (e.g. use 0027 to adhere to more strict
+# security standards).
+UMASK=0022