https://bugzilla.wikimedia.org/show_bug.cgi?id=34945

--- Comment #7 from Antoine "hashar" Musso <[email protected]> 2012-03-05 09:33:29 
UTC ---
(In reply to comment #6)
<snip> 
> [root@alex w]# php maintenance/install.php   --dbuser testwikiuser --dbpass
> NotForYou --installdbpass NotForYou --installdbuser root  --pass NotForYou 
> test
<snip>
> [root@alex w]# ls -l LocalSettings.php 
> -rw-r--r--. 1 root root 4487 Mar  4 19:04 LocalSettings.php

What is the point of that test? You could have verified that your root user as
a 0022 umask just by doing:

 $ touch /tmp/fooumask
 $ ls -l /tmp/fooumask
 -rw-r--r--  1  root root 0 some_date  /tmpfooumask
 $

Try again with 1.18 and you will get the same result.


Please note that in the above case, file belonging to root:root, you need the
other user to be able to read the file or apache will not be able to read the
file.

If the file belong to apache:apache , even as r--r-----, any user able to host
files on your server will be able to read it just by doing:  
file_get_contents( '/var/www/yourwiki/LocalSettings.php');

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to