Restrict permissions in systemd/fcgiwrap.socket.

gnosek / fcgiwrap

Simple FastCGI wrapper for CGI scripts

http://nginx.localdomain.pl/

MIT License

407 stars 134 forks source link

Closed m-ou-se closed 5 years ago

m-ou-se commented 8 years ago

The default SocketMode is 0666, which means that anybody could execute scripts as the user fcgiwrap runs as.