Re: [patch] safe mode gid check

From: Date: Mon, 09 Jul 2001 16:35:42 +0000
Subject: Re: [patch] safe mode gid check
References: 1  Groups: php.dev 
Request: Send a blank email to php-dev+get-59345@lists.php.net to get a copy of this message
Here is the patch against current CVS.

Use:
  cd php4; patch -p0 <php-safe-gid.diff

-James
 CITS / Web Developer
 The University of Vermont

On Mon, 9 Jul 2001, Rasmus Lerdorf wrote:

> Could you recreate this patch against current CVS?
> I think it is a good idea, but your patch doesn't work at all against the
> current code.
>
> Instructions about getting the code from CVS can be found here:
>
>   http://php.net/anoncvs.php
>
> -Rasmus
>
> On Mon, 9 Jul 2001, James E. Flemer wrote:
>
> > This is a patch against php-4.0.4pl1.
> >
> > Description:
> >   In Safe Mode, when opening files the UID of the script
> > owner and the UID of the destination file are compared. In
> > some circumstances it is desired that this check be relaxed
> > to a GID compare. The attached patch adds a php ini
> > directive "safe_mode_gid" (boolean, default: Off). When
> > this is On, a GID compare is performed if the UID compare
> > fails.
> >   Additionally this patch adds a new PHP function
> > getmygid(), which returns the GID of the executing script
> > (see getmyuid()).
> >
> > Author:
> >   James Flemer <jflemer@zoo.uvm.edu>
> >   CITS / Web Developer
> >   The University of Vermont
> >
> > [ Please CC me in all replies, I am not subscribed to the list. ]
> >
> > Thanks,
> > -James
> >
>


Thread (4 messages)

« previous php.dev (#59345) next »