Bug#1128380: uwsgi[-core] insecure PID file work-around (at least for use under mailman3-web)

[Michael Paoli]

My successfully tested workaround
(at least covering use under mailman3-web):

$ diff -U 4 /etc/init.d/mailman3-web{.BAK,}
--- /etc/init.d/mailman3-web.BAK        2019-06-07 18:03:29.000000000 +0000
+++ /etc/init.d/mailman3-web    2026-02-19 04:42:45.000000000 +0000
@@ -33,8 +33,14 @@
 do_start () {
     start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON \
         --test >/dev/null|| return 1

+    # https://bugs.debian.org/1128380 work-around:
+    if [ -f $PIDFILE ]; then
+        chmod o-w $PIDFILE
+    else
+        (umask 022 && >> $PIDFILE)
+    fi
     start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON \
         -- $DAEMON_ARGS || return 2
 }

$