mirrors/php-src
0
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-11-28 04:14:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix bug #67060: use default mode of 660

Browse Source
This commit is contained in:
Stanislav Malyshev 2014-04-15 10:43:24 -07:00
parent 2d625b5f81
commit 35ceea928b
3 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
NEWS
View File

@ -25,7 +25,7 @@ PHP NEWS
. Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent . Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent
in its name). (PR #588) in its name). (PR #588)
?? ??? 2014, PHP 5.4.28 01 May 2014, PHP 5.4.28
- Core: - Core:
. Fixed bug #61019 (Out of memory on command stream_get_contents). (Mike) . Fixed bug #61019 (Out of memory on command stream_get_contents). (Mike)
@ -55,6 +55,8 @@ PHP NEWS
- FPM: - FPM:
. Fixed bug #66482 (unknown entry 'priority' in php-fpm.conf). . Fixed bug #66482 (unknown entry 'priority' in php-fpm.conf).
. Fixed bug #67060 (sapi/fpm: possible privilege escalation due to insecure
default configuration) (CVE-2014-0185). (Stas)
- JSON: - JSON:
. Fixed bug #66021 (Blank line inside empty array/object when . Fixed bug #66021 (Blank line inside empty array/object when

2
sapi/fpm/fpm/fpm_unix.c
View File

@ -35,7 +35,7 @@ int fpm_unix_resolve_socket_premissions(struct fpm_worker_pool_s *wp) /* {{{ */
/* uninitialized */ /* uninitialized */
wp->socket_uid = -1; wp->socket_uid = -1;
wp->socket_gid = -1; wp->socket_gid = -1;
wp->socket_mode = 0666; wp->socket_mode = 0660;
if (!c) { if (!c) {
return 0; return 0;

4
sapi/fpm/php-fpm.conf.in
View File

@ -166,10 +166,10 @@ listen = 127.0.0.1:9000
; permissions must be set in order to allow connections from a web server. Many ; permissions must be set in order to allow connections from a web server. Many
; BSD-derived systems allow connections regardless of permissions. ; BSD-derived systems allow connections regardless of permissions.
; Default Values: user and group are set as the running user ; Default Values: user and group are set as the running user
; mode is set to 0666 ; mode is set to 0660
;listen.owner = @php_fpm_user@ ;listen.owner = @php_fpm_user@
;listen.group = @php_fpm_group@ ;listen.group = @php_fpm_group@
;listen.mode = 0666 ;listen.mode = 0660
; List of ipv4 addresses of FastCGI clients which are allowed to connect. ; List of ipv4 addresses of FastCGI clients which are allowed to connect.
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original ; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original