#16920 [Fbk->Bgs]: File permissions security problem

ID: 16920 Updated by: sniper@php.net Reported By: jr-php@quo.to -Status: Feedback +Status: Bogus Bug Type: *Configuration Issues Operating System: Red Hat Linux 7.2 PHP Version: 4.2.0 New Comment: Check your umask, that's propably the reason for this. Previous Comments: ------------------------------------------------------------------------ [2002-09-17 21:02:43] iliaa@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-latest.zip ------------------------------------------------------------------------ [2002-04-29 19:40:59] sniper@php.net Oops. This is Makefile issue, of course. 'make install' should set these. ------------------------------------------------------------------------ [2002-04-29 19:38:00] sniper@php.net The bug system is not the appropriate forum for asking support questions. For a list of a range of more appropriate places to ask for help using PHP, please visit http://www.php.net/support.php ------------------------------------------------------------------------ [2002-04-29 18:47:48] jr-php@quo.to When I run "make install" as root, most of the files installed under /usr/local/include/php have a user id of 500, a group id of 500, and a mode of 664. This is very insecure for (hopefully) obvious reasons: it gives whichever user who has a numeric id of 500 write access to the files, and also any users in group 500. Ideally, it should install the files with user id 0, group id 0, and a mode of 644. Here is my configure line, in case it matters: ./configure --with-apache=../apache_1.3.24 --enable-track-vars \ --with-mysql --with-zlib --with-gd ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=16920&edit=1