6 ms·
In theory, to make the temp/cache directories more secure I imagine
by TarqDirtyToMe 10y ago
In theory, to make the temp/cache directories more secure I imagine
- dchest 10y agoThis would make sense if it created those directories, but IMHO it should fail to start if the path exists and isn't owned by www process. The function that does chown() is even called ngx_create_paths().
- TarqDirtyToMe 10y agoCompletely agree. Time for a PR?
- discordianfish 10y agoI agreed, would at least consider it a bug if not a security issue.
- TarqDirtyToMe 10y agoDefinitely bad behavior. Ideally, no one but privileged users should be able to edit the configuration imho but this opens the door for attackers.