Where is a good place to set umask?

[Neil Darlow]

Hi,

I'm running YSE on a FreeBSD system. It installed like a dream, nice work people.

I like to tighten the permissions of directories and files for any web-based application because I have a small number of shell accounts on the system and I don't want database passwords etc. casually snooped at.

The scheme I use is to give ownership of directories and files, which must be written by the application, to the webserver user. I then remove the group writable and world readable/writable permissions for these directories and files.

This is fine for pre-existing files but for those created after the install it is necessary to modify the permissions that are used when a file is created. I usually do this with a strategically placed umask(0137) call in some common include or require file.

In the case of YSE, I have added the umask call to the top of Subs.php. Is this the optimum place for me to place it? :)