Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Bug#458085: apache2.2-common: wrong permissions on /var/lock/apache2

From: Stefan Fritsch <sf(at)sfritsch.de>
Date: Fri Dec 28 2007 - 20:41:03 EST


Hi,

On Friday 28 December 2007, Gabor Gombas wrote:
> /etc/init.d/apache2 contains an unconditional
>
> install -d -o www-data /var/lock/apache2
>
> If apache is configured to run under a different user than www-data
> (and thus /var/lock/apache2 owned by this user), then this

the simple solution is to change the user in /etc/init.d/apache2, too. This is a config file and local changes will not be overwritten.

It was a bit unfortunate that the line had to be introduced in a stable point release and caused a behaviour change, but it was necessary to fix a different bug.

> - overrides permissions set by the administrator, which is IMHO
> a policy violation

I don't think policy says anything about this particular case (directory automatically created and not owned by any package).

> The init script must parse /etc/apache2/apache.conf and use the
> "User" setting from there.

This is quite fragile (because of includes, etc.) and we don't want to do that. But it would make sense to either add a comment in apache.conf that /etc/init.d/apache2 needs to be changed as well, or to set the user via an envvar that can be used in both apache2.conf and the init script.

Do you need help?X

Cheers,
Stefan

-- 
To UNSUBSCRIBE, email to debian-apache-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Received on Fri Dec 28 20:48:38 2007

This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 02:59:27 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library