Skip to content
Better HN
Top
Best
Ask
Show
New
Jobs
Search
⌘K
0 points
dchest
9y ago
0 comments
Save
Share
This would make sense if it created those directories, but IMHO it should fail to start if the path exists and isn't owned by www process. The function that does chown() is even called ngx_create_paths().
0 comments
3 comments · 2 top-level
top
newest
oldest
discordianfish
9y ago
· 1 in thread
I agreed, would at least consider it a bug if not a security issue.
TarqDirtyToMe
9y ago
Definitely bad behavior. Ideally, no one but privileged users should be able to edit the configuration imho but this opens the door for attackers.
TarqDirtyToMe
9y ago
Completely agree. Time for a PR?
j
/
k
navigate · click thread line to collapse