php_error_log default permission with php cgi

[bluepine]

Hello,
I noticed today that on my servers the php_error_log each user has in his document root is readable by everybody. Now I fixed it manually by setting every file to 600 but still it would be better if the file itself was created by default with those permission.

Stefano

[cPanelDon]

While the error_log files may have read permission, by default they should not be accessible through the web sites they are located within. Public access is restricted by default through specific entries in the Apache configuration (httpd.conf) file; these should be included already and no additional steps may be necessary.

For reference, here are the two specific entries I am referring to:

<Files ~ "^error_log$">
    Order allow,deny
    Deny from all
    Satisfy All
</Files>

<FilesMatch "^\.ht">
    Order allow,deny
    Deny from all
</FilesMatch>