mirror of
https://github.com/ZoneMinder/zoneminder.git
synced 2026-11-05 20:22:56 -05:00
Nic Boet
8dbc2d977e
cake_error.log, error.log, cake_debug.log and debug.log in ZM_LOGDIR
were created 0644 under the usual umask of 022, so any local
account could read them. Before the redaction in this series they held
the token, auth hash or password of any API request that failed.
The three FileLog configs now set 'mask' => 0640. Cake applies it only
when it creates a file: on the first write, and after its own 10 MB
rotation. An existing file keeps its mode.
Behaviour change: new files are 0640, owned by the user PHP runs as and
its primary group (www-data:www-data on Debian/Ubuntu, apache:apache on
Red Hat/Fedora), so only that user, members of that group and root can
read them. The Debian packages chown /var/log/zm to www-data:root, which
does not change the group of the files PHP creates in it. Nothing in
ZoneMinder reads these files: the web log view and zmaudit use the Logs
table. The distros' logrotate configs run as root; with the usual
global "create" a rotated file is recreated with the same mode and
owner, otherwise Cake recreates it with the mask.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit 48d5fad41d)
134 lines
5.9 KiB
Plaintext
134 lines
5.9 KiB
Plaintext
<?php
|
|
/**
|
|
* This file is loaded automatically by the app/webroot/index.php file after core.php
|
|
*
|
|
* This file should load/create any application wide configuration settings, such as
|
|
* Caching, Logging, loading additional configuration files.
|
|
*
|
|
* You should also use this file to include any files that provide global functions/constants
|
|
* that your application uses.
|
|
*
|
|
* CakePHP(tm) : Rapid Development Framework (https://cakephp.org)
|
|
* Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
|
|
*
|
|
* Licensed under The MIT License
|
|
* For full copyright and license information, please see the LICENSE.txt
|
|
* Redistributions of files must retain the above copyright notice.
|
|
*
|
|
* @copyright Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
|
|
* @link https://cakephp.org CakePHP(tm) Project
|
|
* @package app.Config
|
|
* @since CakePHP(tm) v 0.10.8.2117
|
|
* @license https://opensource.org/licenses/mit-license.php MIT License
|
|
*/
|
|
|
|
// Setup a 'default' cache configuration for use in the application.
|
|
Cache::config('default', array('engine' => '@ZM_CAKEPHP_CACHE@'));
|
|
|
|
/**
|
|
* The settings below can be used to set additional paths to models, views and controllers.
|
|
*
|
|
* App::build(array(
|
|
* 'Model' => array('/path/to/models/', '/next/path/to/models/'),
|
|
* 'Model/Behavior' => array('/path/to/behaviors/', '/next/path/to/behaviors/'),
|
|
* 'Model/Datasource' => array('/path/to/datasources/', '/next/path/to/datasources/'),
|
|
* 'Model/Datasource/Database' => array('/path/to/databases/', '/next/path/to/database/'),
|
|
* 'Model/Datasource/Session' => array('/path/to/sessions/', '/next/path/to/sessions/'),
|
|
* 'Controller' => array('/path/to/controllers/', '/next/path/to/controllers/'),
|
|
* 'Controller/Component' => array('/path/to/components/', '/next/path/to/components/'),
|
|
* 'Controller/Component/Auth' => array('/path/to/auths/', '/next/path/to/auths/'),
|
|
* 'Controller/Component/Acl' => array('/path/to/acls/', '/next/path/to/acls/'),
|
|
* 'View' => array('/path/to/views/', '/next/path/to/views/'),
|
|
* 'View/Helper' => array('/path/to/helpers/', '/next/path/to/helpers/'),
|
|
* 'Console' => array('/path/to/consoles/', '/next/path/to/consoles/'),
|
|
* 'Console/Command' => array('/path/to/commands/', '/next/path/to/commands/'),
|
|
* 'Console/Command/Task' => array('/path/to/tasks/', '/next/path/to/tasks/'),
|
|
* 'Lib' => array('/path/to/libs/', '/next/path/to/libs/'),
|
|
* 'Locale' => array('/path/to/locales/', '/next/path/to/locales/'),
|
|
* 'Vendor' => array('/path/to/vendors/', '/next/path/to/vendors/'),
|
|
* 'Plugin' => array('/path/to/plugins/', '/next/path/to/plugins/'),
|
|
* ));
|
|
*
|
|
*/
|
|
|
|
/**
|
|
* Custom Inflector rules can be set to correctly pluralize or singularize table, model, controller names or whatever other
|
|
* string is passed to the inflection functions
|
|
*
|
|
* Inflector::rules('singular', array('rules' => array(), 'irregular' => array(), 'uninflected' => array()));
|
|
* Inflector::rules('plural', array('rules' => array(), 'irregular' => array(), 'uninflected' => array()));
|
|
*
|
|
*/
|
|
|
|
/**
|
|
* Plugins need to be loaded manually, you can either load them one by one or all of them in a single call
|
|
* Uncomment one of the lines below, as you need. Make sure you read the documentation on CakePlugin to use more
|
|
* advanced ways of loading plugins
|
|
*
|
|
* CakePlugin::loadAll(); // Loads all plugins at once
|
|
* CakePlugin::load('DebugKit'); //Loads a single plugin named DebugKit
|
|
*
|
|
*/
|
|
CakePlugin::load('Crud');
|
|
CakePlugin::load('CakePHP-Enum-Behavior');
|
|
|
|
/**
|
|
* You can attach event listeners to the request lifecycle as Dispatcher Filter. By default CakePHP bundles two filters:
|
|
*
|
|
* - AssetDispatcher filter will serve your asset files (css, images, js, etc) from your themes and plugins
|
|
* - CacheDispatcher filter will read the Cache.check configure variable and try to serve cached content generated from controllers
|
|
*
|
|
* Feel free to remove or add filters as you see fit for your application. A few examples:
|
|
*
|
|
* Configure::write('Dispatcher.filters', array(
|
|
* 'MyCacheFilter', // will use MyCacheFilter class from the Routing/Filter package in your app.
|
|
* 'MyCacheFilter' => array('prefix' => 'my_cache_'), // will use MyCacheFilter class from the Routing/Filter package in your app with settings array.
|
|
* 'MyPlugin.MyFilter', // will use MyFilter class from the Routing/Filter package in MyPlugin plugin.
|
|
* array('callable' => $aFunction, 'on' => 'before', 'priority' => 9), // A valid PHP callback type to be called on beforeDispatch
|
|
* array('callable' => $anotherMethod, 'on' => 'after'), // A valid PHP callback type to be called on afterDispatch
|
|
*
|
|
* ));
|
|
*/
|
|
Configure::write('Dispatcher.filters', array(
|
|
'AssetDispatcher',
|
|
'CacheDispatcher'
|
|
));
|
|
|
|
/**
|
|
* Configures default file logging options
|
|
*/
|
|
App::uses('CakeLog', 'Log');
|
|
CakeLog::config('debug', array(
|
|
'engine' => 'File',
|
|
'types' => array('notice', 'info', 'debug'),
|
|
'file' => 'cake_debug',
|
|
'path' => '@ZM_LOGDIR@/',
|
|
'mask' => 0640
|
|
));
|
|
CakeLog::config('error', array(
|
|
'engine' => 'File',
|
|
'types' => array('warning', 'error', 'critical', 'alert', 'emergency'),
|
|
'file' => 'cake_error',
|
|
'path' => '@ZM_LOGDIR@/',
|
|
'mask' => 0640
|
|
));
|
|
CakeLog::config('custom_path', array(
|
|
'engine' => 'File',
|
|
'path' => '@ZM_LOGDIR@/',
|
|
'mask' => 0640
|
|
));
|
|
|
|
Configure::write('ZM_CONFIG', '@ZM_CONFIG@');
|
|
Configure::write('ZM_CONFIG_SUBDIR', '@ZM_CONFIG_SUBDIR@');
|
|
Configure::write('ZM_VERSION', '@VERSION@');
|
|
Configure::write('ZM_API_VERSION', '@API_VERSION@');
|
|
|
|
require_once(__DIR__ ."/../../../includes/config.php");
|
|
global $zm_config;
|
|
|
|
# Now that our array our finalized, and the config has been defined.
|
|
# Add them to the cakephp Config
|
|
foreach( $zm_config as $key => $config) {
|
|
Configure::write($key, $config['Value']);
|
|
}
|