Bug #71223 [Opn]: Unix socket permissions are not always correct
| From: | gmoniker at gmail dot com | Date: | Sat, 26 Dec 2015 01:18:00 +0000 |
| Subject: | Bug #71223 [Opn]: Unix socket permissions are not always correct | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-198227@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=71223&edit=1
ID: 71223
User updated by: gmoniker at gmail dot com
Reported by: gmoniker at gmail dot com
Summary: Unix socket permissions are not always correct
Status: Open
Type: Bug
Package: FPM related
PHP Version: 5.6.16
Block user comment: N
Private report: N
New Comment:
Where I say 440 in the bug report it should be 660 obviously.
Previous Comments:
------------------------------------------------------------------------
[2015-12-26 01:16:26] gmoniker at gmail dot com
Description:
------------
The listen.mode setting of a worker pool allows to set the basic Unix permission bits. If you set it
to 440 it should have rw-rw---- for example.
The way it is set up in fpm_unix.c is to set an inverted umask and then create the socket with that
umask.
This works on filesystems with only basic permissions. However if you install on a filesystem with
Posix ACL, then the default mask for the parent directory may interfere with this, and the socket
file gets the wrong permission bits, possibly missing a necessary write permission.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=71223&edit=1