Commit 1890caf0 authored by Till Brehm's avatar Till Brehm
Browse files

Set php-fpm listen mode to 0600 on apache servers and 0660 on nginx servers.

parent 28681338
...@@ -8,7 +8,7 @@ listen.allowed_clients = 127.0.0.1 ...@@ -8,7 +8,7 @@ listen.allowed_clients = 127.0.0.1
listen = <tmpl_var name='fpm_socket'> listen = <tmpl_var name='fpm_socket'>
listen.owner = <tmpl_var name='fpm_user'> listen.owner = <tmpl_var name='fpm_user'>
listen.group = <tmpl_var name='fpm_group'> listen.group = <tmpl_var name='fpm_group'>
listen.mode = 0600 listen.mode = <tmpl_vare name='fpm_listen_mode'>
</tmpl_if> </tmpl_if>
user = <tmpl_var name='fpm_user'> user = <tmpl_var name='fpm_user'>
......
...@@ -2642,6 +2642,7 @@ class apache2_plugin { ...@@ -2642,6 +2642,7 @@ class apache2_plugin {
$fpm_socket = $socket_dir.$pool_name.'.sock'; $fpm_socket = $socket_dir.$pool_name.'.sock';
$tpl->setVar('fpm_socket', $fpm_socket); $tpl->setVar('fpm_socket', $fpm_socket);
$tpl->setVar('fpm_listen_mode', '0600');
$tpl->setVar('fpm_pool', $pool_name); $tpl->setVar('fpm_pool', $pool_name);
$tpl->setVar('fpm_port', $web_config['php_fpm_start_port'] + $data['new']['domain_id'] - 1); $tpl->setVar('fpm_port', $web_config['php_fpm_start_port'] + $data['new']['domain_id'] - 1);
......
...@@ -2344,6 +2344,7 @@ class nginx_plugin { ...@@ -2344,6 +2344,7 @@ class nginx_plugin {
$fpm_socket = $socket_dir.$pool_name.'.sock'; $fpm_socket = $socket_dir.$pool_name.'.sock';
$tpl->setVar('fpm_socket', $fpm_socket); $tpl->setVar('fpm_socket', $fpm_socket);
$tpl->setVar('fpm_listen_mode', '0660');
$tpl->setVar('fpm_pool', $pool_name); $tpl->setVar('fpm_pool', $pool_name);
$tpl->setVar('fpm_port', $web_config['php_fpm_start_port'] + $data['new']['domain_id'] - 1); $tpl->setVar('fpm_port', $web_config['php_fpm_start_port'] + $data['new']['domain_id'] - 1);
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment