### CVE-2024-5321: Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes
where BUILTIN\Users may be able to read container logs and NT
AUTHORITY\Authenticated Users may be able to modify container logs.

**Affected Versions**:
  - kubelet <= 1.27.15
  - kubelet <= 1.28.11
  - kubelet <= 1.29.6

                        log.info("Loaded persisted handle: {}", info.getPath());
                    } else {
                        Files.delete(handleFile);
                        log.debug("Deleted expired persisted handle: {}", handleFile);
                    }
                } catch (Exception e) {
                    log.error("Failed to load handle file: " + handleFile, e);

        } catch (final SmbException e) {
            if (log.isDebugEnabled()) {
                log.debug(String.format("VALIDATE_NEGOTIATE_INFO response code 0x%x", e.getNtStatus()));
            }
            log.trace("VALIDATE_NEGOTIATE_INFO returned error", e);
            if (req.getResponse().isReceived() && req.getResponse().isVerifyFailed()

                        cleaned++;
                    } catch (Exception e) {
                        log.error("Failed to auto-close resource: {}", holder.resourceId, e);
                    }
                }
            }
        }

        if (cleaned > 0) {
            log.info("Cleaned up {} abandoned resources", cleaned);
        }
    }

    /**

        return LocalDateTime.ofInstant(instant, ZoneId.systemDefault());
    }

    /**
     * Gets the path to the log file.
     *
     * @return The log file path.
     */
    public String getLogFilePath() {
        final String value = System.getProperty("fess.log.path");
        if (value != null) {
            return value;
        }
        final String userDir = System.getProperty("user.dir");

        QueryBuilder result = matchAllQueryCommand.execute(context, query, boost);

        assertNotNull(result);

        // Note: Actual log output verification would require a log appender mock
        // but we can at least ensure the method executes without errors
        logger.info("Execute method called with query: {} and boost: {}", query, boost);
    }

    @Test
    public void test_execute_withHighBoost() {

/*
 [Log Notification]
*/
subject: [FESS] /*pmb.level*/ Log Alert: /*pmb.hostname*/
>>>
--- Server Info ---
Host Name: /*pmb.hostname:orElse('Unknown')*/

--- Log Summary ---
Level: /*pmb.level*/
Total: /*pmb.count*/ event(s) in the last /*pmb.interval*/ seconds

--- Log Details ---
/*pmb.details*/

                    log.info("Successfully unregistered witness: {}", registration.getRegistrationId());
                } else {
                    String errorMsg = response != null ? response.getError() : "Response was null";
                    log.warn("Failed to unregister witness: {}", errorMsg);
                }

            } catch (Exception e) {
                log.error("Error during witness unregistration", e);

	}
	for _, file := range files {
		f, err := w.Create(file.Name)
		if err != nil {
			log.Fatal(err)
		}
		_, err = f.Write([]byte(file.Body))
		if err != nil {
			log.Fatal(err)
		}
	}

	// Make sure to check the error on Close.
	err := w.Close()
	if err != nil {
		log.Fatal(err)
	}
}

func ExampleReader() {
	// Open a zip archive for reading.

 */
package org.codelibs.fess.opensearch.log.cbean.bs;

import java.util.ArrayList;
import java.util.List;
import java.util.Map;

import org.codelibs.fess.opensearch.log.allcommon.EsAbstractConditionBean;
import org.codelibs.fess.opensearch.log.bsentity.dbmeta.FavoriteLogDbm;
import org.codelibs.fess.opensearch.log.cbean.FavoriteLogCB;
import org.codelibs.fess.opensearch.log.cbean.ca.FavoriteLogCA;