51483 - checksetup.pl changes permissions of html files

Status: VERIFIED INVALID

(Bugzilla :: Bugzilla-General, defect, P3)

Description

[B.G. Mahesh]

hi

Every time I run checksetup.pl it changes the permissions of html files to 640, 
it should be 644 instead. Because of this the files cannot be views in the 
browser :-( and we have to change the permissions manually every time

Comment 1

[Dave Miller [:justdave]]

According to Apache's documentation, your web stuff is supposed to be set for 
640, owned by a user other than the web server, but in the same group as the 
webserver.  This way the server can see it, but it doesn't leave it open for 
the rest of your installation.  You can fix it so your server can see the files 
by setting the "$webservergroup" variable appropriately in localconfig before 
running checksetup.pl.

Comment 2

[B.G. Mahesh]

hi

In localconfig I had the line

$webservergroup = "bugs";


bugs(4)% ls -l *.html
-rw-r--r--    1 bugs     bugs         2779 Aug 17 04:37 booleanchart.html
-rw-r--r--    1 bugs     bugs         6817 Aug 28 23:18 bug_status.html
-rw-r--r--    1 bugs     bugs        11149 Mar  7  2000 bugwritinghelp.html
-rw-r--r--    1 bugs     bugs         5511 Aug 28 23:18 confirmhelp.html
-rw-r--r--    1 bugs     bugs         2338 Jan 22  2000 help.html
-rw-r--r--    1 bugs     bugs          939 Jan 19  1999 helpemailquery.html
-rw-r--r--    1 bugs     bugs         2737 Nov  2  1999 how_to_mail.html
-rw-r--r--    1 bugs     bugs         2652 Jan 27  2000 index.html
-rw-r--r--    1 bugs     bugs         1349 Nov  2  1999 newquip.html
-rw-r--r--    1 bugs     bugs          283 Aug 28 23:18 notargetmilestone.html
-rw-r--r--    1 bugs     bugs         2331 Nov  2  1999 votehelp.html


Files are owned by bugs.bugs

And in apache httpd.conf I have,

<VirtualHost 190.1.6.26>
User bugs
Group bugs
DocumentRoot /usr/local/apache/htdocs/VIRTUAL/bugzilla/public_html
ScriptAlias /cgi-bin/ /usr/local/apache/htdocs/VIRTUAL/bugzilla/public_html/cgi-
bin/
ServerName 190.1.6.26
ErrorLog /usr/local/apache/logs/error_log
CustomLog /usr/local/apache/logs/access_log "%h %l %u %t \"%r\" %s %b \"%
{Referer}i\" \"%{User-Agent}i\""
</VirtualHost>


I think I have made sure things are correct in httpd.conf also.

bgm

Comment 3

[Dave Miller [:justdave]]

For safety, apache should be running in some user other than bugs, so that it 
does not have access to write to your html files.  It should however, be running 
in that same group.  your config for apache looks good to me, as long as you 
don't have another virtual host entry using that same IP address somewhere.  You 
can do that if they have different domain names, but since you're not using a 
domain name, it'll apply for any of them.  You have restarted apache since 
adding that to the httpd.conf file, right?  (Stupid question, but just covering 
the bases)

Comment 4

[B.G. Mahesh]

hi

190.1.6.26 is the used only ONCE in httpd.conf. Infact I don't have any other 
virtual host now. I had commented out all other virtual hosts

Yes, I restarted apache (if it was windows I had to reboot the machine!)

B.G. Mahesh

Comment 5

[Dave Miller [:justdave]]

I was working with B.G. this afternoon on his configuration.  This was 
discovered to be a configuration problem with apache.  Namely, it doesn't honor 
User and Group params inside a VirtualHost block, and the main apache 
configuration was using a different user/group combo.  Bugzilla was reconfigured 
to use apache's main group, and it started working.  Since this was not a 
bugzilla problem, marking this invalid.

Comment 6

[Stephan Niemz]

verified based on the comments

Comment 7

[Dave Miller [:justdave]]

moving all closed Bugzilla bugs to the new Bugzilla product.
This batch is DUPLICATE/INVALID/WORKSFORME/WONTFIX
reassigning to default owner and QA in case of the bug being reopened.
Clearing milestones, since we really shouldn't have them on these types of
resolutions.  Sorry for the spam everyone...

Comment 8

[Dave Miller [:justdave]]

damn, bit by bug 30731. sorry for the respam... one more coming to complete
fixing this...

Comment 9

[Dave Miller [:justdave]]

finishing status correction