[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#262268: marked as done (apache2-mpm-prefork: new files created by cgi-perl scripts have very strange permission set)



Your message dated Tue, 10 Aug 2004 14:04:39 +0100
with message-id <20040810130439.GA21735@fugue.home.clearairturbulence.org>
and subject line Submitter says this is done.
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 30 Jul 2004 12:08:48 +0000
>From wbx@pc-2n04.inf.fh-brs.de Fri Jul 30 05:08:48 2004
Return-path: <wbx@pc-2n04.inf.fh-brs.de>
Received: from pc-2n04.inf.fh-bonn-rhein-sieg.de (pc-2n04.inf.fh-brs.de) [194.95.66.101] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BqWBr-000377-00; Fri, 30 Jul 2004 05:08:47 -0700
Received: from localhost (pc-2n04 [127.0.0.1])
	by pc-2n04.inf.fh-brs.de (Postfix) with ESMTP id 9E811A09A;
	Fri, 30 Jul 2004 14:08:44 +0200 (CEST)
Received: from pc-2n04.inf.fh-brs.de ([127.0.0.1])
	by localhost (pc-2n04.inf.fh-brs.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 12634-02; Fri, 30 Jul 2004 14:08:44 +0200 (CEST)
Received: by pc-2n04.inf.fh-brs.de (Postfix, from userid 301)
	id 43BAFA0A4; Fri, 30 Jul 2004 14:08:44 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Waldemar Brodkorb <wbx@luusa.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: apache2-mpm-prefork: new files created by cgi-perl scripts have very strange
 permission set
X-Mailer: reportbug 2.63
Date: Fri, 30 Jul 2004 14:08:44 +0200
Message-Id: <20040730120844.43BAFA0A4@pc-2n04.inf.fh-brs.de>
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at pc-2n04.inf.fh-brs.de
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Package: apache2-mpm-prefork
Version: 2.0.50-5
Severity: important

Hi,
if i use the following small test.pl script to create a file:
-----------------------------------
#!/usr/bin/perl -w

open(TMP,">/tmp/test.log");
print TMP "hallo\n\n";
close TMP;

print "Content-type: text/html\n\n";
print "hallo";
-----------------------------------

After executing this via a web browser my file get these
strange permissions:
ls -la /tmp/test.log
-r------w-  1 www-data root 0 Jul 30 14:04 /tmp/test.log

A serious problem.

I fixed this temporary by adding umask 0022 to /etc/init.d/apache2.

I tried to verify this behaviour on my desktop system (BSD) with apache2
from source, but it does not happen on that machine.

thanks
	Waldemar

-- System Information:
Debian Release: sarge
  APT prefers testing
  APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.6
Locale: LANG=C, LC_CTYPE=C

Versions of packages apache2-mpm-prefork depends on:
ii  apache2-common              2.0.50-5     Next generation, scalable, extenda
ii  libapr0                     2.0.50-1     The Apache Portable Runtime
ii  libc6                       2.3.2.ds1-13 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-16    Berkeley v4.2 Database Libraries [
ii  libexpat1                   1.95.6-8     XML parsing C library - runtime li
ii  libldap2                    2.1.23-1     OpenLDAP libraries
ii  libssl0.9.7                 0.9.7d-3     SSL shared libraries
ii  zlib1g                      1:1.2.1.1-5  compression library - runtime

-- no debconf information

---------------------------------------
Received: (at 262268-done) by bugs.debian.org; 10 Aug 2004 13:04:41 +0000
>From thom@debian.org Tue Aug 10 06:04:41 2004
Return-path: <thom@debian.org>
Received: from mailrelay.eurospot.com (relay.swisscom-eurospot.com) [62.39.81.196] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BuWIz-00078j-00; Tue, 10 Aug 2004 06:04:41 -0700
Received: from virelais.home.clearairturbulence.org (unknown [82.109.138.58])
	by relay.swisscom-eurospot.com (Postfix) with ESMTP id 3A5C6286C52
	for <262268-done@bugs.debian.org>; Tue, 10 Aug 2004 15:04:40 +0200 (CEST)
Received: by virelais.home.clearairturbulence.org (Postfix, from userid 1000)
	id 634D2B967A; Tue, 10 Aug 2004 14:04:39 +0100 (BST)
Date: Tue, 10 Aug 2004 14:04:39 +0100
From: Thom May <thom@debian.org>
To: 262268-done@bugs.debian.org
Subject: Submitter says this is done.
Message-ID: <20040810130439.GA21735@fugue.home.clearairturbulence.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040523i
Delivered-To: 262268-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Apparently unreproducible



Reply to: