[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#214515: apache: Please do not use /tmp for config file creation



Package: apache
Version: 1.3.28-1
Severity: normal

When a temporary file is moved from /tmp to /etc there is a risk of truncation
on a crash if /tmp is a different file system.

It also causes problems for SE Linux as the configuration file gets the wrong
type, this prevents the init script from starting the daemon.  I could grant
such access, but that would give the start scripts too much access.

The best thing to do is to put all temporary files related to creating the new
apache configuration under /etc/apache, this solves all problems (and does not
require the use of mktemp).

-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux lyta 2.4.22-deb2 #1 Mon Sep 29 15:56:43 EST 2003 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages apache depends on:
ii  apache-common                1.3.28-1    Support files for all Apache webse
ii  debconf                      1.3.14      Debian configuration management sy
hi  dpkg                         1.10.13-se1 Package maintenance system for Deb
ii  libc6                        2.3.2-8     GNU C Library: Shared libraries an
ii  libdb4.1                     4.1.25-9    Berkeley v4.1 Database Libraries [
ii  libexpat1                    1.95.6-6    XML parsing C library - runtime li
ii  libmagic1                    4.04-1      File type determination library us
ii  logrotate                    3.6.5-2.se3 Log rotation utility
ii  mime-support                 3.23-1      MIME files 'mime.types' & 'mailcap
ii  perl [perl5]                 5.8.1-2     Larry Wall's Practical Extraction 

-- debconf information excluded




Reply to: