Ticket #547 (closed defect: fixed)

Opened 2 years ago

Last modified 2 years ago

Dangerous umask(0) in server.c:daemonize()

Reported by: kili@outback.escape.de Assigned to: jan
Priority: normal Milestone:
Component: core Version: 1.4.10
Severity: major Keywords:
Cc: Blocking:
Need Feedback:

Description

daemonize() in server.c sets the umask to 0 after forking.

This behaviour is completely unintuive and may introduce severe security risks for people running CGI scripts.

Attachments

Change History

03/04/2006 05:12:58 PM changed by jan

  • status changed from new to closed.
  • resolution set to fixed.

fixed in [1026]

Add/Change #547 (Dangerous umask(0) in server.c:daemonize())




Change Properties
Action