Bug#262268: apache2-mpm-prefork: new files created by cgi-perl scripts have very strange permission set

[Waldemar Brodkorb <wbx@luusa.org>]

Package: apache2-mpm-prefork
Version: 2.0.50-5
Severity: important

Hi,
if i use the following small test.pl script to create a file:
-----------------------------------
#!/usr/bin/perl -w

open(TMP,">/tmp/test.log");
print TMP "hallo\n\n";
close TMP;

print "Content-type: text/html\n\n";
print "hallo";
-----------------------------------

After executing this via a web browser my file get these
strange permissions:
ls -la /tmp/test.log
-r------w-  1 www-data root 0 Jul 30 14:04 /tmp/test.log

A serious problem.

I fixed this temporary by adding umask 0022 to /etc/init.d/apache2.

I tried to verify this behaviour on my desktop system (BSD) with apache2
from source, but it does not happen on that machine.

thanks
	Waldemar

-- System Information:
Debian Release: sarge
  APT prefers testing
  APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.6
Locale: LANG=C, LC_CTYPE=C

Versions of packages apache2-mpm-prefork depends on:
ii  apache2-common              2.0.50-5     Next generation, scalable, extenda
ii  libapr0                     2.0.50-1     The Apache Portable Runtime
ii  libc6                       2.3.2.ds1-13 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-16    Berkeley v4.2 Database Libraries [
ii  libexpat1                   1.95.6-8     XML parsing C library - runtime li
ii  libldap2                    2.1.23-1     OpenLDAP libraries
ii  libssl0.9.7                 0.9.7d-3     SSL shared libraries
ii  zlib1g                      1:1.2.1.1-5  compression library - runtime

-- no debconf information