To enhance security, I changed my system umask in /etc/profile to 007. After this, creating new websites would no produce websites that could use PHP. I got errors such as:
[Sun Dec 30 09:13:25 2012] [warn] [client 126.96.36.199] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Sun Dec 30 09:13:25 2012] [error] [client 188.8.131.52] Premature end of script headers: index.php
I tracked the problem down to the entries in the /var/www/php-fcgi-scripts directory that were now created with 750 instead of 755 mode. Once I manually changed the entries back to 755, everything worked again.
In looking at the code, I see in:
on line 958:
exec('chmod 755 '.$fcgi_starter_script);
That is fine for modifying the mode of the .php-fcgi-starter file, but the directory is created on line 925 and is created with the default umask. That's the problem. So, before this line, I inserted:
and all worked again.
Perhaps this umask should be in a more global or earlier location. Can any of the devs suggest a more permanent fix?