Bug #16920 Updated: File permissions security problem

2002-04-29 Thread sniper

 ID:   16920
 Updated by:   [EMAIL PROTECTED]
 Reported By:  [EMAIL PROTECTED]
-Status:   Open
+Status:   Bogus
 Bug Type: *Configuration Issues
 Operating System: Red Hat Linux 7.2
 PHP Version:  4.2.0
 New Comment:

The bug system is not the appropriate forum for asking support
questions. For a list of a range of more appropriate places to ask
for help using PHP, please visit http://www.php.net/support.php


Previous Comments:


[2002-04-29 18:47:48] [EMAIL PROTECTED]

When I run make install as root, most of the files installed under
/usr/local/include/php have a user id of 500, a group id of 500, and a
mode of 664. This is very insecure for (hopefully) obvious reasons: it
gives whichever user who has a numeric id of 500 write access to the
files, and also any users in group 500.

Ideally, it should install the files with user id 0, group id 0, and a
mode of 644.


Here is my configure line, in case it matters:

./configure --with-apache=../apache_1.3.24 --enable-track-vars \
  --with-mysql --with-zlib --with-gd




-- 
Edit this bug report at http://bugs.php.net/?id=16920edit=1




Bug #16920 Updated: File permissions security problem

2002-04-29 Thread sniper

 ID:   16920
 Updated by:   [EMAIL PROTECTED]
 Reported By:  [EMAIL PROTECTED]
-Status:   Bogus
+Status:   Analyzed
 Bug Type: *Configuration Issues
 Operating System: Red Hat Linux 7.2
 PHP Version:  4.2.0
 New Comment:

Oops. This is Makefile issue, of course. 
'make install' should set these.



Previous Comments:


[2002-04-29 19:38:00] [EMAIL PROTECTED]

The bug system is not the appropriate forum for asking support
questions. For a list of a range of more appropriate places to ask
for help using PHP, please visit http://www.php.net/support.php



[2002-04-29 18:47:48] [EMAIL PROTECTED]

When I run make install as root, most of the files installed under
/usr/local/include/php have a user id of 500, a group id of 500, and a
mode of 664. This is very insecure for (hopefully) obvious reasons: it
gives whichever user who has a numeric id of 500 write access to the
files, and also any users in group 500.

Ideally, it should install the files with user id 0, group id 0, and a
mode of 644.


Here is my configure line, in case it matters:

./configure --with-apache=../apache_1.3.24 --enable-track-vars \
  --with-mysql --with-zlib --with-gd




-- 
Edit this bug report at http://bugs.php.net/?id=16920edit=1