[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#703102: "PidFile /dev/null" replaces /dev/null with a real file if run as root



Package: apache2.2-bin
Version: 2.2.22-13
Severity: normal

As part of a test setup, I ran Apache within a cgroup to contain it, so
I didn't need Apache to manage a PID file.  I set "PidFile /dev/null",
but when I ran Apache as root (so that it could drop privileges and
change to another user/group), it overwrite /dev/null with a real file.
That caused no end of havoc on my system.

Perhaps Apache could truncate the existing file but not remove it?

- Josh Triplett

-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.8-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apache2.2-bin depends on:
ii  libapr1                  1.4.6-3
ii  libaprutil1              1.4.1-3
ii  libaprutil1-dbd-sqlite3  1.4.1-3
ii  libaprutil1-ldap         1.4.1-3
ii  libc6                    2.13-38
ii  libcap2                  1:2.22-1.2
ii  libldap-2.4-2            2.4.31-1
ii  libpcre3                 1:8.31-2
ii  libssl1.0.0              1.0.1e-1
ii  zlib1g                   1:1.2.7.dfsg-13

apache2.2-bin recommends no packages.

apache2.2-bin suggests no packages.

-- no debconf information


Reply to: