[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Apache install problem in Debian 1.2



I noticed the following problem with my apache/cgi-scripts install when
upgrading to 1.2.

from the package files:

apache_1.1.1-5.deb
drwxr-x--- root/root         0 Sep 29 16:32 1996 usr/lib/
drwxr-x--- root/root         0 Sep 29 16:32 1996 usr/lib/httpd/
drwxr-x--- root/root         0 Sep 29 16:32 1996 usr/lib/httpd/cgi-bin/
drwxr-x--- root/root         0 Sep 29 16:33 1996 usr/lib/httpd/icons/
-rw-r----- root/root      4816 Sep 29 16:33 1996 usr/lib/httpd/icons/README
-rw-r----- root/root       246 Sep 29 16:33 1996 usr/lib/httpd/icons/a.gif
...
-rw-r----- root/root       261 Sep 29 16:33 1996 usr/lib/httpd/icons/world2.gif

cgi-scripts_1.0.1-2.deb
drwxrws--- root/www-data     0 Oct  2 16:28 1996 usr/lib/
drwxrws--- root/www-data     0 Oct  2 16:28 1996 usr/lib/httpd/
drwxrws--- root/www-data     0 Oct  2 16:28 1996 usr/lib/httpd/cgi-bin/
-rwxr-x--- root/www-data  6220 Oct  2 16:28 1996 usr/lib/httpd/cgi-bin/animate
...
-rwxr-x--- root/www-data  2675 Oct  2 16:28 1996 usr/lib/httpd/cgi-bin/wais.pl

As you can see above the permissions set by the apache package on
/usr/lib/httpd /usr/lib/httpd/cgi-bin /usr/lib/httpd/icons and the files
in the icons directory do not allow the server to access these files (by
default the server runs as www-data, group www-data).  These files and
directories either need to be owned by root/www-data or be owned by
root/root with world read/execute permission (my personal preference). 

Christopher E. Stefan                        flatline@ironhorse.com
http://www.ironhorse.com/~flatline           finger for PGP key
System Administrator                         Phone: (206) 783-6636
Ironhorse Software, Inc.                     FAX:   (206) 783-4591


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com


Reply to: