From: Christian Schulte <cs@schulte.it>
Subject: Re: httpd(8) log files are world and daemon-readable
To: tech@openbsd.org
Date: Sat, 29 Aug 2026 17:50:24 +0200

Am 28.08.2026 um 18:49 schrieb Brian Brombacher:
> Nginx and Apache httpd both create log files with permission 644 and in the case of Apache httpd, this can be configured to 640.
I did not check this but if it's just about changing the umask httpd
runs with placing a httpd file to /etc/login.conf.d should be
sufficient, no?

$ cat /etc/login.conf.d/httpd
httpd:\
        :umask=027:\
        :tc=daemon:

Regards,
-- 
Christian