Log file security

[jeroenvermeulen]

@danghvu Thank you for this great extension.

There is one security concern I have. I am using Ubuntu Trusty. The log mod_dumpost creates are owned by www-data:www-data and chmod 644. All other logs Apache creates are owned by root:adm. They can be stored in a dir with chmod 700 + chown root, making it impossible for users to read the logs. The logs mod_dumpost creates are a lot less secure. Is it possible for you to improve this?

[danghvu]

Yes I am aware of this -- the module is not meant for production code so I just wonder if there is a real need.

[jeroenvermeulen]

Ah... I was planning to try it in production :-)