- Run fcgiwrap under target credential and only change ownership if the credential do not match the current socket_owner/group setting.
- Use umask instead of chmod.
- Use nobody/nogroup for default credentials instead of root.
Details
Details
- Reviewers
matthew mat - Group Reviewers
ports secteam - Commits
- rP453157: Improve robustness of owner/mode settings.
Diff Detail
Diff Detail
- Repository
- rP FreeBSD ports repository
- Lint
No Lint Coverage - Unit
No Test Coverage - Build Status
Buildable 12120 Build 12421: arc lint + arc unit
Event Timeline
Comment Actions
Looks ok to me, might want to explain a bit the umask thing, took me a few minutes to see what you were doing.