Log file security

[jeroenvermeulen]

@danghvu Thank you for this great extension.

There is one security concern I have.
I am using Ubuntu Trusty.
The log mod_dumpost creates are owned by www-data:www-data and chmod 644.
All other logs Apache creates are owned by root:adm. They can be stored in a dir with chmod 700 + chown root, making it impossible for users to read the logs.
The logs mod_dumpost creates are a lot less secure.
Is it possible for you to improve this?

[danghvu]

Yes I am aware of this -- the module is not meant for production code so I just wonder if there is a real need.

[jeroenvermeulen]

Ah... I was planning to try it in production :-)