From owner-freebsd-questions  Sat Nov 29 19:54:08 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id TAA13059
          for questions-outgoing; Sat, 29 Nov 1997 19:54:08 -0800 (PST)
          (envelope-from owner-freebsd-questions)
Received: from horst.bfd.com (horst.bfd.com [204.160.242.10])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id TAA13050
          for <questions@FreeBSD.ORG>; Sat, 29 Nov 1997 19:54:05 -0800 (PST)
          (envelope-from ejs@bfd.com)
Received: from harlie.bfd.com (bastion.bfd.com [204.160.242.14]) by horst.bfd.com (8.8.5/8.7.3) with SMTP id TAA18094 for <questions@FreeBSD.ORG>; Sat, 29 Nov 1997 19:54:03 -0800 (PST)
Date: Sat, 29 Nov 1997 19:54:03 -0800 (PST)
From: "Eric J. Schwertfeger" <ejs@bfd.com>
To: questions@FreeBSD.ORG
Subject: Re: 2.2-Stable breaks FCGI
In-Reply-To: <Pine.BSF.3.95.971129191723.29610A-100000@harlie.bfd.com>
Message-ID: <Pine.BSF.3.95.971129195224.208A-100000@harlie.bfd.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk



On Sat, 29 Nov 1997, Eric J. Schwertfeger wrote:

> apps, you should set a umask of 111 in your script that starts apache. 

Oh, a umask of 000 will also work, but I used 111 just to make sure that
the server doesn't incidentally create any executables.  I doubt it would
make any difference, but if it ever did stop someone trying to exploit a
script or bug in the server, it would be worth it.