From 74095699940184048e4cdd84360f41cc08a12528 Mon Sep 17 00:00:00 2001 From: Martin Brugnara Date: Sat, 4 Jun 2022 00:24:35 +0200 Subject: Expose umask override value as config parameter: localstorage.umask Commit 451c06d introduced override for umask value. This is needed to avoid broken env configuration or dirty workers to mess with the permissions when creating new files. Most Nextcloud, that does not integrate with external software would work fine with an hard-coded value (451c06d set it at 022). Advanced install may require more flexibility, as such this commit exposes the "umask override value" as configuration parameter: `localstorage.umask` It defaults to 0022 both in code and in config/config.sample.php . Signed-off-by: Martin Brugnara --- config/config.sample.php | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'config') diff --git a/config/config.sample.php b/config/config.sample.php index c3a0048625c..4cb19c8d9e9 100644 --- a/config/config.sample.php +++ b/config/config.sample.php @@ -1839,6 +1839,18 @@ $CONFIG = [ */ 'localstorage.allowsymlinks' => false, +/** + * Nextcloud overrides umask to ensure suitable access permissions + * regardless of webserver/php-fpm configuration and worker state. + * WARNING: Modifying this value has security implications and + * may soft-break the installation. + * + * Most installs shall not modify this value. + * + * Defaults to ``0022`` + */ +'localstorage.umask' => 0022, + /** * EXPERIMENTAL: option whether to include external storage in quota * calculation, defaults to false. -- cgit v1.2.3