Re: httpd(8) log files are world and daemon-readable
Christian Schulte <[email protected]>
| Newsgroups | gmane.os.openbsd.tech |
|---|---|
| Message-ID | <[email protected]> |
Am 28.08.2026 um 18:49 schrieb Brian Brombacher:
> Nginx and Apache httpd both create log files with permission 644 and in the case of Apache httpd, this can be configured to 640.
I did not check this but if it's just about changing the umask httpd
runs with placing a httpd file to /etc/login.conf.d should be
sufficient, no?
$ cat /etc/login.conf.d/httpd
httpd:\
:umask=027:\
:tc=daemon:
Regards,
--
Christian