[EROS-Arch] Error logging

Ben Laurie ben@algroup.co.uk
Tue, 25 Sep 2001 11:34:36 +0100


Bill Frantz wrote:
> 
> At 2:24 PM -0700 9/23/01, Jonathan S. Shapiro wrote:
> ><DIV><FONT face=Arial size=2>FIrst, t</FONT><FONT face=Arial size=2>here
> >are at
> >least two parties who need to consent for an error log entry to be disclosed:
> >the developer of the program and the party in control of the program
> >instance.
> >The second is typically the user, but might (e.g.) be a system
> >administrator. In
> >some environments a third party, the security officer, may also need to
> >consent.</FONT></DIV>
> 
> While I can see that the Apache developers, and the web site administrator
> need to consent, I don't see a technical way for me as a visitor to that
> web site to have a say in log disclosure.

I don't see this at all - why would the developer have to consent?
Surely it is only the user(s) of the program and the system(s) it is
hosted on that are involved - the developer just produced some source!

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff