[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#151422: marked as done (apache2-common: suexec does not work well)

Your message dated Fri, 02 Aug 2002 14:00:33 -0400
with message-id <E17agj3-00053b-00@auric.debian.org>
and subject line Bug#151422: fixed in apache2 2.0.39+cvs.1027964860-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Received: (at submit) by bugs.debian.org; 30 Jun 2002 06:24:21 +0000
>From omote@utyuuzin.net Sun Jun 30 01:24:21 2002
Return-path: <omote@utyuuzin.net>
Received: from goudge.org [] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 17OY8D-0001I4-00; Sun, 30 Jun 2002 01:24:21 -0500
Received: from dita.omt.local-network (pokonyan [])
	by goudge.org (Postfix) with ESMTP id D7584CD101
	for <submit@bugs.debian.org>; Sun, 30 Jun 2002 15:24:13 +0900 (JST)
Date: Sun, 30 Jun 2002 15:24:01 +0900
Message-ID: <qupr8ip5loe.wl%omote@utyuuzin.net>
From: Masahito Omote <omote@debian.org>
To: submit@bugs.debian.org
Subject: apache2-common: suexec does not work well
User-Agent: Wanderlust/2.9.13 (Unchained Melody) SEMI/1.14.3 (Ushinoya)
 FLIM/1.14.3 (=?ISO-8859-4?Q?Unebigory=F2mae?=) APEL/10.3 Emacs/20.7
 (i386-debian-linux-gnu) MULE/4.0 (HANANOEN)
MIME-Version: 1.0 (generated by SEMI 1.14.3 - "Ushinoya")
Content-Type: text/plain; charset=US-ASCII
Delivered-To: submit@bugs.debian.org

Package: apache2-common
Severity: normal
Version: 2.0.37-2

apache2's suexec cannot work well, it always returns 501.
This is because suexec configuration is not sufficient.

First, permission of /usr/sbin/suexec2 is just 755, but it should be 4755.

Next, when just running suexec2 only, the result is as follows,
# /usr/sbin/suexec2
failed to open log file
fopen: No such file or directory

# strace /usr/sbin/apache2
execve("/usr/sbin/suexec2", ["/usr/sbin/suexec2"], [/* 35 vars */]) = 0
uname({sys="Linux", node="dita.omt.local-network", ...}) = 0
brk(0)                                  = 0x804b5f4
open("/usr/local/apache/logs/cgi.log", O_WRONLY|O_APPEND|O_CREAT, 0666) = -1 ENOENT (No such file or directory)
write(2, "failed to open log file\n", 24failed to open log file) = 24
write(2, "fopen: No such file or directory"..., 33fopen: No such file or directory) = 33
_exit(1)                                = ?

suexec log's location is not satisfy FHS, this file should be
in /var/log/apache2.

Because the suexec rules are stricted in apache2, it needs suexec optioning
properly in configure.

And I think, suexec2 should not be in /usr/sbin but be
/usr/lib/apache2/suexec2 like apache-common.

So I suggest debian/rules be as follows,

AP2_CONFARGS =  --enable-layout=Debian --enable-so \
		--enable-cgi=shared \
                --with-suexec-caller=www-data --with-suexec-bin=/usr/lib/apache2/suexec2 \
                --with-suexec-docroot=/var/www/apache2-default \
                --with-suexec-userdir=public_html \
	mv debian/apache2-mpm-worker/usr/sbin/suexec debian/apache2-common/usr/lib/apache2/suexec2
	chmod 4755 debian/apache2-common/usr/lib/apache2/suexec2

It works well in my environment by this change.

Masahito Omote(omote@debian.org)

Received: (at 151422-close) by bugs.debian.org; 2 Aug 2002 18:02:02 +0000
>From troup@auric.debian.org Fri Aug 02 13:02:02 2002
Return-path: <troup@auric.debian.org>
Received: from auric.debian.org [] (mail)
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 17agkU-0006JV-00; Fri, 02 Aug 2002 13:02:02 -0500
Received: from troup by auric.debian.org with local (Exim 3.12 1 (Debian))
	id 17agj3-00053b-00; Fri, 02 Aug 2002 14:00:33 -0400
From: Thom May <thom@debian.org>
To: 151422-close@bugs.debian.org
X-Katie: $Revision: 1.17 $
Subject: Bug#151422: fixed in apache2 2.0.39+cvs.1027964860-1
Message-Id: <E17agj3-00053b-00@auric.debian.org>
Sender: James Troup <troup@auric.debian.org>
Date: Fri, 02 Aug 2002 14:00:33 -0400
Delivered-To: 151422-close@bugs.debian.org

We believe that the bug you reported is fixed in the latest version of
apache2, which is due to be installed in the Debian FTP archive:

  to pool/main/a/apache2/apache2-common_2.0.39+cvs.1027964860-1_i386.deb
  to pool/main/a/apache2/apache2-dev_2.0.39+cvs.1027964860-1_all.deb
  to pool/main/a/apache2/apache2-doc_2.0.39+cvs.1027964860-1_all.deb
  to pool/main/a/apache2/apache2-mpm-perchild_2.0.39+cvs.1027964860-1_i386.deb
  to pool/main/a/apache2/apache2-mpm-prefork_2.0.39+cvs.1027964860-1_i386.deb
  to pool/main/a/apache2/apache2-mpm-threadpool_2.0.39+cvs.1027964860-1_i386.deb
  to pool/main/a/apache2/apache2-mpm-worker_2.0.39+cvs.1027964860-1_i386.deb
  to pool/main/a/apache2/apache2_2.0.39+cvs.1027964860-1.diff.gz
  to pool/main/a/apache2/apache2_2.0.39+cvs.1027964860-1.dsc
  to pool/main/a/apache2/apache2_2.0.39+cvs.1027964860.orig.tar.gz
  to pool/main/a/apache2/libapr0-dev_2.0.39+cvs.1027964860-1_i386.deb
  to pool/main/a/apache2/libapr0_2.0.39+cvs.1027964860-1_i386.deb

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 151422@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Thom May <thom@debian.org> (supplier of updated apache2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

Hash: SHA1

Format: 1.7
Date: Fri, 29 Jul 2002 19:12:56 +0100
Source: apache2
Binary: apache2-mpm-perchild apache2-common apache2-dev apache2-doc apache2-mpm-prefork apache2-mpm-worker libapr0-dev apache2-mpm-threadpool libapr0
Architecture: source i386 all
Version: 2.0.39+cvs.1027964860-1
Distribution: unstable
Urgency: low
Maintainer: Debian Apache List <debian-apache@lists.debian.org>
Changed-By: Thom May <thom@debian.org>
 apache2-common - Next generation, scalable, extendable web server
 apache2-dev - Development headers for apache2
 apache2-doc - Documentation for apache2
 apache2-mpm-perchild - Experimental High speed perchild/follower threaded model for Apac
 apache2-mpm-prefork - Traditional model for Apache2
 apache2-mpm-threadpool - Experimental High speed thread pool model for Apache2
 apache2-mpm-worker - High speed threaded model for Apache2
 libapr0    - The Apache Portable Runtime
 libapr0-dev - Development headers for libapr
Closes: 151286 151314 151422 151432 151433 151459 151766 151772 151848 152220 152221
 apache2 (2.0.39+cvs.1027964860-1) unstable; urgency=low
   * New Upstream Source
   * Correct Icons path (Closes: #151314)
   * Add missing dep on mime-support (Closes: #151848, #152220, #152221, #151772)
   * Fixup suexec2, thanks to Masahito Omote (Closes: #151422)
   * Mark Brown
     - Remove spurious claim that apache2 hasn't been uploaded (Closes: #151433)
     - Bring apache2 in line with policy on /usr/share/doc/ (Closes: #151459)
     - Make reload behave the same as force-reload (Closes: #151432)
   * place the manual in the right place, thanks to Md  (Closes: #151766)
   * David Kimdon
     - add build depends on zlib1g-dev (Closes: #151286)
 4c48f0375de88976a9345334146f06b7 913 net optional apache2_2.0.39+cvs.1027964860-1.dsc
 fff955ec295fb5aad7de329a8ceaacb5 4116904 net optional apache2_2.0.39+cvs.1027964860.orig.tar.gz
 cead72948ce9199571c10ac06e1062a2 53476 net optional apache2_2.0.39+cvs.1027964860-1.diff.gz
 d034cb961498887c850cb2fe9a1b32c5 1128554 net optional apache2-doc_2.0.39+cvs.1027964860-1_all.deb
 252016fb64d55c945a9337999f5c60f6 148802 net optional apache2-dev_2.0.39+cvs.1027964860-1_all.deb
 a4a9aee4ec16e7d865528e902bd59931 1501906 net optional apache2-common_2.0.39+cvs.1027964860-1_i386.deb
 296496eefe97c73ceee151637029ae48 204376 net optional apache2-mpm-worker_2.0.39+cvs.1027964860-1_i386.deb
 7b87c1dddfb8c49a4076e7f283b9b6fe 204008 net optional apache2-mpm-threadpool_2.0.39+cvs.1027964860-1_i386.deb
 c198eebf4e633d499708463dac11c89b 203934 net optional apache2-mpm-perchild_2.0.39+cvs.1027964860-1_i386.deb
 f7bc6026f7a5cbb9f4ffacc11c9406b5 200914 net optional apache2-mpm-prefork_2.0.39+cvs.1027964860-1_i386.deb
 18caca85e89d4903a0119e7054a1e719 102680 net optional libapr0_2.0.39+cvs.1027964860-1_i386.deb
 c9a46cd3ee2b31ca222ad0bc876d4191 221588 net optional libapr0-dev_2.0.39+cvs.1027964860-1_i386.deb

Version: GnuPG v1.0.7 (GNU/Linux)


Reply to: