Bug #15249
closed
EM sets permissions wrong when downloading an extension, causing problems with suphp
0%
Description
suphp is an Apache module that increases security by making the script file owner execute the corresponding process instead of the apache user. To make this process safer, suphp imposes a few rules. One of those rules is that the script file must only be writable by the user, not the group or the world.
So I changed my whole PHP site directory tree to be writable only by the user. So the permissions of my typo3conf/ext/* directories look like this:
drwxr-xr-x
Yet, when I download an extension from the TER (or from a file), the EM changes the permissions to this:
drwxrwxr-x
The files in that directories and the corresponding subdirectories are also group-writable, which causes them to not get executed any more (error 500).
This makes using Typo3 with suphp really hard as I have to change the permissions every time I download or upgrade an extension.
The EM schould use the drwxr-xr-x permissions when writing the extension to disk (or the permissions need to be configurable).
(issue imported from #M1958)
Files
Updated by 
Updated by 
Updated by