#5239 - fixperms: New permissions are being applied on "other", but webserver user might own the files
-
By PDStig
- Added
- 4 views
| Identifier | #5239 |
|---|---|
| Issue type | Minor issue (breaks specific functionality) |
| Title | fixperms: New permissions are being applied on "other", but webserver user might own the files |
| Status | Completed |
| Handling member | Chris Graham |
| Addon | General / Uncategorised |
| Description | The fixperms.php tool is "fixing" bad permissions by applying them to the "others" bit (owner|group|others). However, this does not work if the files are owned by the same user as the webserver is running and the permissions for owner are borked; they need to be applied to owner in that case if the php cli has permission to do so (else, probably throw an error that it needs to run as sudo / admin). |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
This affects Linux.
The issue is User bitmask privileges take precedence over Other bitmask privileges.
i.e. 0066 permissions would not result in a writable file for the owner of that file, but would for some random other user.
That's news to us, but ok.