Bug #16920 Updated: File permissions security problem

ID: 16920 Updated by: sniper@php.net Reported By: jr-php@quo.to -Status: Open +Status: Bogus Bug Type: *Configuration Issues Operating System: Red Hat Linux 7.2 PHP Version: 4.2.0 New Comment: The bug system is not the appropriate forum for asking support questions. For a list of a range of more appropriate places to ask for help using PHP, please visit http://www.php.net/support.php Previous Comments: ------------------------------------------------------------------------ [2002-04-29 18:47:48] jr-php@quo.to When I run "make install" as root, most of the files installed under /usr/local/include/php have a user id of 500, a group id of 500, and a mode of 664. This is very insecure for (hopefully) obvious reasons: it gives whichever user who has a numeric id of 500 write access to the files, and also any users in group 500. Ideally, it should install the files with user id 0, group id 0, and a mode of 644. Here is my configure line, in case it matters: ./configure --with-apache=../apache_1.3.24 --enable-track-vars \ --with-mysql --with-zlib --with-gd ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=16920&edit=1