Issue Plesk Auto Update broke PHP Session Directory

[futureweb]

Hey there,
on all our Plesk Servers the latest Minor Auto Update (Plesk Onyx Version 17.8.11 Update #72, last updated on Nov 1, 2019 04:09 AM) broke PHP Session Directories.
Session Directories are configured according this KB: Session file folder in PHP is not auto cleaned

After the Update the chmod of the Directory was changed to 770 while it was 777 before ...

Before Update:

ll /var/lib/php/        
total 228
drwxrwxrwx 2 root apache 229376 Nov  1 00:02 session

After Update:

ll /var/lib/php/        
total 228
drwxrwx--- 2 root apache 229376 Nov  3 20:22 session

Resulting in PHP no longer able reading/writing Session Files ... Permission denied ...
chmodding it back to 777 fixed the issue ... but how to prevent this from happening in the Future again?

thx, bye from Austria
Andreas Schnederle-Wagner

 

[Bitpalast]

Looks different by default on our systems:
drwx-wx-wt 2 root root 294912 Nov 10 12:40 session/
Not seeing the same issue.

 

[Ales]

On CentOS 7 it is indeed:

[user@server /]# ll /var/lib/php
total 12
  4 drwxr-xr-x  3 root root   4096 Nov  1 17:06 .
  4 drwxr-xr-x 37 root root   4096 Apr  6  2019 ..
  4 drwx-wx-wt  2 root root   4096 Nov 10 19:46 session

I'm not sure about CentOS 6 as we've migrated away a while ago, but in our old documentation I indeed see notes about the default being 770 and root:apache, with remarks about setting the access rights to 777...