#739047 Bad Permissions check for linking files

Package:
webfs
Source:
webfs
Description:
lightweight HTTP server for static content
Submitter:
Narcis Garcia
Date:
2025-02-01 21:33:02 UTC
Severity:
normal
Tags:
#739047#5
Date:
2014-02-15 11:53:40 UTC
From:
To:
I've trying webfsd 1.21 to serve gobby/infinoted files, but due to those problems:
http://gobby.0x539.de/trac/ticket/617
https://bugs.archlinux.org/task/18746
People cannot open files easily, and need to open more permissions than necessary.

Files are created with umask 077 (only owner reads; not the group), and webfsd only shows links to files in directory listings when the primary GROUP has read permission.

Files links should be made when the file is simply readable, because of owner, group or others. This situation (and combination) forces to set owner and group of files to match the primary UID & GID of this webserver.