J0WI

See also #13721

All versions are affected, but

An approach similar to 4361019f2f3cdb48da90af6345b21bd579c725d2 is required [here](https://github.com/nextcloud/server/blob/eef571e4fb203e255d3bdb2a79737b0d87a79a2b/lib/private/Files/Cache/Cache.php#L333) and [here](https://github.com/nextcloud/server/blob/eef571e4fb203e255d3bdb2a79737b0d87a79a2b/lib/private/Files/Cache/Cache.php#L399) to fix this.

Thanks for reporting this. I can reproduce the issue, but I'm not very happy with the proposed permission change in #764. However, this should not break your NextCloud, you just...

Why would you prefer 3 over 2? 4 would also be an option for me, this is basically what happens now. @tilosp what is your opinion?

> It there any difference between 1, 2 and 3 in terms of security? Not it terms of security, but I'd avoid changing upstream files.

```sh chmod 770 /usr/local/etc/php/conf.d/redis-session.ini ``` This makes the PHP config world writeable, including for the webserver itself. Apache and PHP-FPM both drop their privileges if the container is started as...

Does #1516 work for you?

@Pkuutn did you apply the changes in #1516 locally?

It's only available from DockerHub after https://github.com/docker-library/official-images/pull/11418 is merged.