{"id":12191,"date":"2019-01-14T20:32:54","date_gmt":"2019-01-14T19:32:54","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/"},"modified":"2019-01-14T20:32:54","modified_gmt":"2019-01-14T19:32:54","slug":"documentum-cs-7-777-permission-jobs-log","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/","title":{"rendered":"Documentum CS 7.* &#8211; 777 permission on jobs log"},"content":{"rendered":"<p>A few weeks ago at a customer, our team was involved in a security control.<br \/>\nWe tracked files with 777 permission and we detected that logs generated by Documentum jobs have 777 permissions.<br \/>\n<!--more--><\/p>\n<p>Security before anything else, that&#8217;s why this topic was my top priority!<\/p>\n<p>First of all, I checked the logs on some Content Servers, and I had the same issue everywhere.<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n[dmadmin@vmCS1 ~]$ cd $DOCUMENTUM\/dba\/log\/Repo1\/sysadmin\n[dmadmin@vmCS1 sysadmin]$ ls -rtl\ntotal 192\n-rwxrwxrwx. 1 dmadmin dmadmin   1561 Oct 25 10:12 DataDictionaryPublisherDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin   5172 Oct 28 08:02 DMCleanDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin   6701 Oct 28 08:17 DMFilescanDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin  14546 Nov  2 00:01 ConsistencyCheckerDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin   2969 Nov  2 00:09 ContentWarningDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin    596 Nov  2 00:12 DBWarningDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin 102765 Nov  2 00:17 FileReportDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin   3830 Nov  2 00:25 LogPurgeDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin    527 Nov  2 00:28 QueueMgtDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin  15932 Nov  2 00:31 StateOfDocbaseDoc.txt<\/pre>\n<p>I verified the umask at operating system level:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n[dmadmin@vmCS1 ~]$ umask\n0027<\/pre>\n<p>umask has the expected value!<br \/>\nFor more information regarding the umask : <a href=\"https:\/\/en.wikipedia.org\/wiki\/Umask\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/en.wikipedia.org\/wiki\/Umask<\/a><\/p>\n<p>Check if a different value of umask is set in the server.ini file ([SERVER_STARTUP] section):<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n[dmadmin@vmCS1 ~]$ cd $DOCUMENTUM\/dba\/config\/Repo1\n[dmadmin@vmCS1 ~]$ grep umask server.ini\n[dmadmin@vmCS1 ~]$ <\/pre>\n<p>No result<br \/>\nIf it has been set, the umask setting in the server.ini overwrite the one set at operation system level.<br \/>\nThis umask value is intended to control the permissions of files associated with documents stored in the repository, and their enclosing folders.<br \/>\nIn my case, these files and folders have the correct permission.<\/p>\n<p>Well, why only these logs have a different permission? I checked again some servers and I saw that not all jobs log have 777 permission, strange:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1 highlight: [5]\">\n[dmadmin@vmCS2 sysadmin]$ ls -rtl\ntotal 108\n-rwxrwxrwx. 1 dmadmin dmadmin   601  Oct 18 07:12 DMFilescanDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin   138  Oct 20 21:37 UpdateStatsDoc.txt\n-rw-r-----. 1 dmadmin dmadmin   1832 Oct 24 13:45 FTCreateEventsDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin   1251 Oct 25 11:55 DataDictionaryPublisherDoc.txt\n-rwxrwxrwx. 1 dmadmin dmadmin   442  Oct 28 07:12 DMCleanDoc.txt\n<\/pre>\n<p>In fact, the common point between logs with 777 permission is that they are generated by dmbasic methods. These logs are not controlled by the umask set at the operating system level or server.ini.<\/p>\n<p>The system umask value is overridden in the docbase start script, and set to 0. This value is then inherited by dmbasic methods!<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n[dmadmin@vmCS1 sysadmin]$ grep umask $DOCUMENTUM\/dba\/dm_start_Repo1\numask 0\n<\/pre>\n<p>I feel better now \ud83d\ude00<\/p>\n<p>So, to resolve this issue I had to:<\/p>\n<ul>\n<li>Change the umask to 027 instead of 0 in the docbase start script<\/li>\n<li>Stop the docbase<\/li>\n<li>Change the permission of logs already generated<\/li>\n<li>Start the docbase<\/li>\n<li>Check the logs after a job execution<\/li>\n<\/ul>\n<p>To make it easy and quickly, you can use below steps:<br \/>\n<em>Commands below take in account High Availability case, don&#8217;t worry about that \ud83d\ude09<\/em><\/p>\n<ol>\n<li>\n\t\t<strong>To change on one docbase<\/strong><br \/>\n\t\tDefine the docbase name<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\texport DCTM_DOCBASE_NAME=\"DOCBASENAME\"<\/pre>\n<p>\t\tCheck if it is a HA environment or not, and set the DCTM_DOCBASE_GLOBAL_NAME accordingly:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tcd $DOCUMENTUM\/dba\n\t\texport DCTM_DOCBASE_SERVER_CONFIG=$(grep server_config_name config\/${DCTM_DOCBASE_NAME}\/server.ini | cut -d   -f 3) ;\n\t\tif [ ${DCTM_DOCBASE_SERVER_CONFIG} == ${DCTM_DOCBASE_NAME} ]\n\t\tthen\n\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${DCTM_DOCBASE_NAME}\n\t\telse\n\t\t\texport DCTM_DOCBASE_SERVICE_NAME=$(grep 'service =' config\/${DCTM_DOCBASE_NAME}\/server.ini | cut -d   -f 3) ;\n\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${DCTM_DOCBASE_NAME}\"_\"${DCTM_DOCBASE_SERVICE_NAME}\n\t\tfi<\/pre>\n<p>\t\tChange the umask value in the start script<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tcp -p dm_start_${DCTM_DOCBASE_GLOBAL_NAME} dm_start_${DCTM_DOCBASE_GLOBAL_NAME}_bck_$(date +%Y%m%d-%H%M%S)\n\t\techo \"Docbase ${DCTM_DOCBASE_NAME} : Start script has been saved\"\n\t\tsed -i 's,umask 0,umask 027,' dm_start_${DCTM_DOCBASE_GLOBAL_NAME}\n\t\techo \"Docbase ${DCTM_DOCBASE_NAME} : Umask changed\"<\/pre>\n<p>\t\tStop the docbases using the following command:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\t.\/dm_shutdown_${DCTM_DOCBASE_GLOBAL_NAME}<\/pre>\n<p>\t\tCheck if the docbase has been stopped:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tps -ef | grep ${DCTM_DOCBASE_NAME}<\/pre>\n<p>\t\tChange the permission of existing files:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tDCTM_DOCBASE_ID_DEC=$(grep docbase_id config\/${DCTM_DOCBASE_NAME}\/server.ini | cut -d   -f 3)\n\t\tDCTM_DOCBASE_ID_HEX=$(printf \"%xn\" $DCTM_DOCBASE_ID_DEC)\n\t\tchmod 640 log\/*${DCTM_DOCBASE_ID_HEX}\/sysadmin\/*<\/pre>\n<p>\t\tStart the docbase using the following command:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\t.\/dm_start_${DCTM_DOCBASE_GLOBAL_NAME}<\/pre>\n<\/li>\n<li>\n<p>\t\t<strong>To change on all docbases<\/strong><br \/>\n\t\tCheck if it is a HA environment or not (check done one docbase only), and set the DCTM_DOCBASE_GLOBAL_NAME accordingly, then change the umask value in the start script.<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tcd $DOCUMENTUM\/dba\n\t\texport FIRST_DOCBASE_NAME=$(ls config | head -1)\n\t\texport DCTM_DOCBASE_SERVER_CONFIG=$(grep server_config_name config\/${FIRST_DOCBASE_NAME}\/server.ini | cut -d   -f 3)\n\t\tif [ ${FIRST_DOCBASE_NAME} == ${DCTM_DOCBASE_SERVER_CONFIG} ]\n\t\tthen\n\t\t\texport HA_ENV=\"NO\"\n\t\telse\n\t\t\texport HA_ENV=\"YES\"\n\t\tfi\n\t\t\n\t\tfor i in `ls config`; do \n\t\t\tif [ ${HA_ENV} == \"NO\" ]\n\t\t\tthen\n\t\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${i}\n\t\t\telse\n\t\t\t\texport DCTM_DOCBASE_SERVICE_NAME=$(grep 'service =' config\/${i}\/server.ini | cut -d   -f 3)\n\t\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${i}\"_\"${DCTM_DOCBASE_SERVICE_NAME}\n\t\t\tfi\n\t\t\tcp -p dm_start_${DCTM_DOCBASE_GLOBAL_NAME} dm_start_${DCTM_DOCBASE_GLOBAL_NAME}_bck_$(date +%Y%m%d-%H%M%S)\n\t\t\techo \"Docbase ${i} : Start script has been saved\"\n\t\t\tsed -i 's,umask 0,umask 027,' dm_start_${DCTM_DOCBASE_GLOBAL_NAME}\n\t\t\techo \"Docbase ${i} : Umask changed\"\n\t\tdone<\/pre>\n<p>\t\tStop the docbases using the following command:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tfor i in `ls config`; do \n\t\t\tif [ ${HA_ENV} == \"NO\" ]\n\t\t\tthen\n\t\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${i}\n\t\t\telse\n\t\t\t\texport DCTM_DOCBASE_SERVICE_NAME=$(grep 'service =' config\/${i}\/server.ini | cut -d   -f 3)\n\t\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${i}\"_\"${DCTM_DOCBASE_SERVICE_NAME}\n\t\t\tfi\n\t\t\techo \"Stopping docbase ${i}\"\n\t\t\t.\/dm_shutdown_${DCTM_DOCBASE_GLOBAL_NAME}\n\t\t\techo \"The docbase ${i} has been stopped\"\n\t\tdone<\/pre>\n<p>\t\tCheck that all docbases are stopped<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tps -ef | grep dmadmin<\/pre>\n<p>\t\tChange permission on log files<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">chmod 640 log\/*\/sysadmin\/*<\/pre>\n<p>\t\tStart the docbases using the following commands:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\n\t\tfor i in `ls config`; do \n\t\t\tif [ ${HA_ENV} == \"NO\" ]\n\t\t\tthen\n\t\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${i}\n\t\t\telse\n\t\t\t\texport DCTM_DOCBASE_SERVICE_NAME=$(grep 'service =' config\/${i}\/server.ini | cut -d   -f 3)\n\t\t\t\texport DCTM_DOCBASE_GLOBAL_NAME=${i}\"_\"${DCTM_DOCBASE_SERVICE_NAME}\n\t\t\tfi\n\t\t\techo \"Starting docbase ${i}\" \n\t\t\t.\/dm_start_${DCTM_DOCBASE_GLOBAL_NAME}\n\t\t\techo \"The docbase ${i} has been started\" \n\t\tdone<\/pre>\n<p>\t\tCheck that all docbases are started<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n\t\tps -ef | grep dmadmin<\/pre>\n<\/li>\n<\/ol>\n<p>I was able to sleep peacefully this night \ud83d\ude09 and you know now how to resolve this security issue.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A few weeks ago at a customer, our team was involved in a security control. We tracked files with 777 permission and we detected that logs generated by Documentum jobs have 777 permissions.<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[525],"tags":[129,1542,890,25],"type_dbi":[],"class_list":["post-12191","post","type-post","status-publish","format-standard","hentry","category-enterprise-content-management","tag-documentum","tag-jobs","tag-log","tag-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Documentum CS 7.* - 777 permission on jobs log - dbi Blog<\/title>\n<meta name=\"description\" content=\"Security issue because logs generated by Documentum jobs have 777 permissions, umask checked and corrected\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Documentum CS 7.* - 777 permission on jobs log\" \/>\n<meta property=\"og:description\" content=\"Security issue because logs generated by Documentum jobs have 777 permissions, umask checked and corrected\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-01-14T19:32:54+00:00\" \/>\n<meta name=\"author\" content=\"David Diab\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Diab\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/\"},\"author\":{\"name\":\"David Diab\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/deb907c3360cacdc6c7df54b4bac3c86\"},\"headline\":\"Documentum CS 7.* &#8211; 777 permission on jobs log\",\"datePublished\":\"2019-01-14T19:32:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/\"},\"wordCount\":461,\"commentCount\":0,\"keywords\":[\"Documentum\",\"Jobs\",\"log\",\"Security\"],\"articleSection\":[\"Enterprise content management\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/\",\"name\":\"Documentum CS 7.* - 777 permission on jobs log - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"datePublished\":\"2019-01-14T19:32:54+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/deb907c3360cacdc6c7df54b4bac3c86\"},\"description\":\"Security issue because logs generated by Documentum jobs have 777 permissions, umask checked and corrected\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/documentum-cs-7-777-permission-jobs-log\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Documentum CS 7.* &#8211; 777 permission on jobs log\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/deb907c3360cacdc6c7df54b4bac3c86\",\"name\":\"David Diab\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/212b1b2e4650bad3116f644ab4fb4663786d94195d7685d0704c8426da088e60?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/212b1b2e4650bad3116f644ab4fb4663786d94195d7685d0704c8426da088e60?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/212b1b2e4650bad3116f644ab4fb4663786d94195d7685d0704c8426da088e60?s=96&d=mm&r=g\",\"caption\":\"David Diab\"},\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/david-diab\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Documentum CS 7.* - 777 permission on jobs log - dbi Blog","description":"Security issue because logs generated by Documentum jobs have 777 permissions, umask checked and corrected","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/","og_locale":"en_US","og_type":"article","og_title":"Documentum CS 7.* - 777 permission on jobs log","og_description":"Security issue because logs generated by Documentum jobs have 777 permissions, umask checked and corrected","og_url":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/","og_site_name":"dbi Blog","article_published_time":"2019-01-14T19:32:54+00:00","author":"David Diab","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Diab","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/"},"author":{"name":"David Diab","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/deb907c3360cacdc6c7df54b4bac3c86"},"headline":"Documentum CS 7.* &#8211; 777 permission on jobs log","datePublished":"2019-01-14T19:32:54+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/"},"wordCount":461,"commentCount":0,"keywords":["Documentum","Jobs","log","Security"],"articleSection":["Enterprise content management"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/","url":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/","name":"Documentum CS 7.* - 777 permission on jobs log - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2019-01-14T19:32:54+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/deb907c3360cacdc6c7df54b4bac3c86"},"description":"Security issue because logs generated by Documentum jobs have 777 permissions, umask checked and corrected","breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/documentum-cs-7-777-permission-jobs-log\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Documentum CS 7.* &#8211; 777 permission on jobs log"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/deb907c3360cacdc6c7df54b4bac3c86","name":"David Diab","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/212b1b2e4650bad3116f644ab4fb4663786d94195d7685d0704c8426da088e60?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/212b1b2e4650bad3116f644ab4fb4663786d94195d7685d0704c8426da088e60?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/212b1b2e4650bad3116f644ab4fb4663786d94195d7685d0704c8426da088e60?s=96&d=mm&r=g","caption":"David Diab"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/david-diab\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/12191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=12191"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/12191\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=12191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=12191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=12191"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=12191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}