Index | Thread | Search

From:
Christian Schulte <cs@schulte.it>
Subject:
Re: httpd(8) log files are world and daemon-readable
To:
tech@openbsd.org
Date:
Sat, 29 Aug 2026 17:50:24 +0200

Download raw body.

Thread
  • Piotr Durlej:

    httpd(8) log files are world and daemon-readable

  • Am 28.08.2026 um 18:49 schrieb Brian Brombacher:
    > Nginx and Apache httpd both create log files with permission 644 and in the case of Apache httpd, this can be configured to 640.
    I did not check this but if it's just about changing the umask httpd
    runs with placing a httpd file to /etc/login.conf.d should be
    sufficient, no?
    
    $ cat /etc/login.conf.d/httpd
    httpd:\
            :umask=027:\
            :tc=daemon:
    
    Regards,
    -- 
    Christian
    
    
  • Piotr Durlej:

    httpd(8) log files are world and daemon-readable