Yep, reproduced it on another system.

Temporary fix: sudo chown :www-data /var/run/php5-fpm.sock

Configuration fix: Uncomment "listen.group = www-data" in
/etc/php5/fpm/pool.d/www.conf

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in Ubuntu.
https://bugs.launchpad.net/bugs/1307027

Title:
  php5-fpm: Possible privilege escalation due to insecure default
  permissions of sockets

To manage notifications about this bug go to:
https://bugs.launchpad.net/php/+bug/1307027/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to