Ticket #7616: 7616_umask_warning.diff

docs/howto/deployment/fastcgi.txt

@@ -110 +110 @@
 Running a preforked server on a Unix domain socket::
 
     ./manage.py runfcgi method=prefork socket=/home/user/mysite.sock pidfile=django.pid
+    
+.. admonition:: Socket security
 
+    Django's default umask requires that the webserver and the Django fastcgi
+    process be run with the same group **and** user. For increased security,
+    you can run them under the same group but as different users. If you do
+    this, you will need to set the umask to 002 using the ``umask`` argument to
+    ``runfcgi``.
+
 Run without daemonizing (backgrounding) the process (good for debugging)::
 
     ./manage.py runfcgi daemonize=false socket=/tmp/mysite.sock maxrequests=1