Bug #71223 [Opn]: Unix socket permissions are not always correct
[email protected] ("gmoniker at gmail dot com")
| Newsgroups | php.bugs |
|---|---|
| Message-ID | <[email protected]> |
Edit report at https://bugs.php.net/bug.php?id=71223&edit=1 ID: 71223 User updated by: gmoniker at gmail dot com Reported by: gmoniker at gmail dot com Summary: Unix socket permissions are not always correct Status: Open Type: Bug Package: FPM related PHP Version: 5.6.16 Block user comment: N Private report: N New Comment: Where I say 440 in the bug report it should be 660 obviously. Previous Comments: ------------------------------------------------------------------------ [2015-12-26 01:16:26] gmoniker at gmail dot com Description: ------------ The listen.mode setting of a worker pool allows to set the basic Unix permission bits. If you set it to 440 it should have rw-rw---- for example. The way it is set up in fpm_unix.c is to set an inverted umask and then create the socket with that umask. This works on filesystems with only basic permissions. However if you install on a filesystem with Posix ACL, then the default mask for the parent directory may interfere with this, and the socket file gets the wrong permission bits, possibly missing a necessary write permission. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=71223&edit=1