[Bug 1307027] Re: php5-fpm: Possible privilege escalation due to insecure default permissions of sockets

Jeff Waugh 1307027 at bugs.launchpad.net
Tue Jun 24 16:34:44 UTC 2014


Yep, reproduced it on another system.

Temporary fix: sudo chown :www-data /var/run/php5-fpm.sock

Configuration fix: Uncomment "listen.group = www-data" in
/etc/php5/fpm/pool.d/www.conf

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in Ubuntu.
https://bugs.launchpad.net/bugs/1307027

Title:
  php5-fpm: Possible privilege escalation due to insecure default
  permissions of sockets

To manage notifications about this bug go to:
https://bugs.launchpad.net/php/+bug/1307027/+subscriptions



More information about the Ubuntu-server-bugs mailing list