3 ms·
Huh, why does nginx even change permissions?
by dchest 10y ago
Huh, why does nginx even change permissions?
- TarqDirtyToMe 10y agoIn theory, to make the temp/cache directories more secure I imagine
- dchest 10y agoThis would make sense if it created those directories, but IMHO it should fail to start if the path exists and isn't owned by www process. The function that does chown() is even called ngx_create_paths().
- TarqDirtyToMe 10y agoCompletely agree. Time for a PR?
- discordianfish 10y agoI agreed, would at least consider it a bug if not a security issue.
- TarqDirtyToMe 10y agoDefinitely bad behavior. Ideally, no one but privileged users should be able to edit the configuration imho but this opens the door for attackers.