主页 / server / 问题 / 437077
Accepted
wbad
Asked: 2012-10-11 15:50:43 +0800 CST

unix套接字的正确权限应该是什么？

  • 772

我已经将 nginx 设置为通过 unix 套接字而不是 tcp 连接到 php5-fpm。我读过这有更少的开销，因此提高了性能。现在我想知道套接字的正确权限应该是什么以避免安全问题？

nginx

2 个回答

  1. Best Answer
    ; Set permissions for unix socket, if one is used. In Linux, read/write
; permissions must be set in order to allow connections from a web server. Many
; BSD-derived systems allow connections regardless of permissions. 
; Default Values: user and group are set as the running user
;                 mode is set to 0666
listen.owner = nginx ;(or the user that the Nginx is running as)
listen.group = nginx ;(or the group that the Nginx is running as)
listen.mode = 0660
    • 2

  2. 对于 UNIX 套接字，执行权限无关紧要，读写权限才是重要的。所以 0660 将套接字限制为所有者用户/组，或 0666 允许任何人连接到它。

    • 0

相关问题