[ILUG] umask query

[Sean O Sullivan]

Paul Jakma wrote:

> On Fri, 22 Apr 2005, Sean O Sullivan wrote:
>
>>> What is creating the file?
>>
>>
>> Apache
>
>
> Which part of apache? I find it hard to believe it's apache itself (or 
> is this for logfiles?).

apache created files (for web content).
it creates files in htroot, and those files must be 775

>
>> Yes, sadly that does not seemingly exist (that I know of...), and I 
>> think umask (or in this case mod_umask for apache) is the only way of 
>> doing it (however files /must/ have 775).
>
>
> Ask an apache expert I guess.
>
> If apache lacks it, whip up a patch to add a 'logfile mask' type 
> configuration option, or somesuch.

I hope not to have to do anything like this...
At least if use a mod someone else does I can blame them somewhat if it 
breaks ;)

>
>> Doing a chmod of all files takes ... 5+ mins & produces 60+megs of 
>> audit logs (lots of files...).
>
>
> Ah, yet another reason to avoid SELinux..
>
> regards,

Not using SELinux (well not the permission end of things) - just the 
audit.d (RH) which logs (certain) commands executed as root & suid progs