top | item 13840322 (no title) TarqDirtyToMe | 9 years ago In theory, to make the temp/cache directories more secure I imagine discuss order hn newest dchest|9 years ago This would make sense if it created those directories, but IMHO it should fail to start if the path exists and isn't owned by www process. The function that does chown() is even called ngx_create_paths(). discordianfish|9 years ago I agreed, would at least consider it a bug if not a security issue. load replies (1) TarqDirtyToMe|9 years ago Completely agree. Time for a PR?
dchest|9 years ago This would make sense if it created those directories, but IMHO it should fail to start if the path exists and isn't owned by www process. The function that does chown() is even called ngx_create_paths(). discordianfish|9 years ago I agreed, would at least consider it a bug if not a security issue. load replies (1) TarqDirtyToMe|9 years ago Completely agree. Time for a PR?
discordianfish|9 years ago I agreed, would at least consider it a bug if not a security issue. load replies (1)
dchest|9 years ago
discordianfish|9 years ago
TarqDirtyToMe|9 years ago