Skip to content
Commit 7c37edb2 authored by Till Brehm's avatar Till Brehm
Browse files

Changed mode of web folder from 0710 to 0711 to make it comaptibe with servers... 

Changed mode of web folder from 0710 to 0711 to make it comaptibe with servers that use NFS for /var/www.
parent 85204d6c
Hide whitespace changes
Inline Side-by-side
  • Thomas @tgmedia ·

    Can I just suggest that the chmod of the docroot of 711 makes other websites php scripts able to run shell commands and see website content of other vhosts.

    I installed a r57 php shell for testing and ran basic bash commands from there and was able to guess file names and cat the contents. Changing this to 0710 fixed it. I see that you have a setting inside the control panel to select 'Network Filesystem', so perhaps this needs to be selected if someone needs this workaround with 0711 for NFS (even though it's horrible security wise).

    Ideas?

  • Till Brehm @tbrehm ·
    Author Owner

    I agree that we should add a config option for that. Beside that, in the master branch, there is support for chrooted PHP-fpm also. This feature will be officially available in ISPConfig 3.2.

0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment