Date: Thu, 22 Sep 2016 21:47:53 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 212911] lang/php56, lang/php70: Add umask to php-fpm rc script Message-ID: <bug-212911-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D212911 Bug ID: 212911 Summary: lang/php56, lang/php70: Add umask to php-fpm rc script Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: tz@freebsd.org Reporter: rk@redb.cz Assignee: tz@freebsd.org Flags: maintainer-feedback?(tz@freebsd.org) Created attachment 175077 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D175077&action= =3Dedit Patch to add umask setting It's a good security practice to run PHP as another user than the owner of application source files. One drawback though with this approach - files created by the application (uploads, caches, etc.) can not be easily delete= d by the owner of application sources. One possible solution to this problem is to use same group for those two us= ers and set umask of the PHP user to 0002. Attached is a patch which allows to = set the umask for php-fpm. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-212911-13>