#42952 [Opn->Asn]: soap cache file is created with insecure permissions on some configurations

ID: 42952 Updated by: jani@php.net Reported By: glen at delfi dot ee -Status: Open +Status: Assigned Bug Type: SOAP related Operating System: PLD Linux PHP Version: 5.2.4 Assigned To: dmitry Previous Comments: ------------------------------------------------------------------------ [2007-11-01 16:10:26] glen at delfi dot ee That would be fine (at least not closed as bogus). Distributions are free to backport changes they like :) ------------------------------------------------------------------------ [2007-11-01 14:14:14] dmitry@php.net I thought about it. It may be good for php-5.3.0, but I don't like to make such change in 5.2.* ------------------------------------------------------------------------ [2007-11-01 14:10:02] glen at delfi dot ee So perhaps keep user id (getuid()) in the cache filename? ------------------------------------------------------------------------ [2007-11-01 13:32:18] dmitry@php.net Even one SAPI in shared environment will have the same issue. If you have several php-cgi processes with different UID, only one of them will own the cache file, and all others won't be able to access it. ------------------------------------------------------------------------ [2007-11-01 13:10:17] glen at delfi dot ee Do you mean different SAPI's like CLI? But different SAPI's have separate php.ini file, where they can define path suitable for them (writable). And in fact i've done that in our distribution. So you consider this distribution related issue? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/42952 -- Edit this bug report at http://bugs.php.net/?id=42952&edit=1