Don't use broad 777 or 666 permissions

drupal-composer · Oct 26, 2019 · c200b83 · c200b83
1 parent bdaa8fd
commit c200b83
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/scripts/composer/ScriptHandler.php b/scripts/composer/ScriptHandler.php
@@ -47,16 +47,16 @@ public static function createRequiredFiles(Event $event) {
         ],
       ];
       drupal_rewrite_settings($settings, $drupalRoot . '/sites/default/settings.php');
-      $fs->chmod($drupalRoot . '/sites/default/settings.php', 0666);
-      $event->getIO()->write("Created a sites/default/settings.php file with chmod 0666");
+      $fs->chmod($drupalRoot . '/sites/default/settings.php', 0664);
+      $event->getIO()->write("Created a sites/default/settings.php file with chmod 0664");
     }
 
-    // Create the files directory with chmod 0777
+    // Create the files directory with chmod 0775
     if (!$fs->exists($drupalRoot . '/sites/default/files')) {
       $oldmask = umask(0);
-      $fs->mkdir($drupalRoot . '/sites/default/files', 0777);
+      $fs->mkdir($drupalRoot . '/sites/default/files', 0775);
       umask($oldmask);
-      $event->getIO()->write("Created a sites/default/files directory with chmod 0777");
+      $event->getIO()->write("Created a sites/default/files directory with chmod 0775");
     }
   }