httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 17229] New: - suexec creating files with wrong group
Date Thu, 20 Feb 2003 02:13:39 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17229>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17229

suexec creating files with wrong group

           Summary: suexec creating files with wrong group
           Product: Apache httpd-1.3
           Version: 1.3.27
          Platform: PC
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: apache@ttsg.com


FreeBSD himinbjorg.ttsg.com 4.7-STABLE FreeBSD 4.7-STABLE #3: Tue Feb  4
22:43:51 EST 2003     root@himinbjorg.ttsg.com:/usr/src/sys/compile/HIMINBJORG  i386

Apache 1.3.27, compiled as :

./configure --prefix=/usr/local/etc/apachetest --with-layout=Apache --enable-mod
ule=log_referer --enable-module=rewrite --enable-suexec --suexec-caller=www --su
exec-logfile=/usr/local/logs/suexec_logfile --suexec-gidmin=1 --suexec-docroot=/
usr/home

Virtual Host configured as (After adding a Listen 82 statement)

<VirtualHost *:82>
ServerAdmin webmaster@ttsg.com
DocumentRoot /usr/home/tuc/cgitest/public_html
Servername cgitest.ttsg.com
ErrorLog "|/usr/local/sbin/cronolog /usr/local/logs/%Y%m%d/cgitest2-error_log"
TransferLog "|/usr/local/sbin/cronolog /usr/local/logs/%Y%m%d/cgitest2-access_lo
g"
UserDir disabled 
HostNameLookups off
IdentityCheck off

ScriptAlias /lcgi-bin/ /usr/home/tuc/cgitest/public_html/lcgi-bin/
 
User cgitest
Group cgitest

<Directory /usr/home/tuc/cgitest/public_html>
AllowOverride All
</Directory>
</VirtualHost>

himinbjorg# grep cgitest /etc/passwd
cgitest:*:9000:9000:Tuc:/usr/home/tuc/cgitest/public_html:/usr/local/bin/zsh
himinbjorg# grep cgitest /etc/group
cgitest:*:9000:

When I run /lcgi-bin/touchfile.sh which is :

#!/bin/sh
echo "Content-type: text/plain"
echo ""
echo "Username="`whoami`
rm /tmp/t
touch /tmp/t
ls -l /tmp/t
echo "id="`id`

When I run it I see in the logs:


[2003-02-19 21:03:31]: info: (target/actual) uid: (cgitest/cgitest) gid:
(cgitest/cgitest) cmd: touchfile.sh


But the output is :
Username=cgitest
-rw-r--r--  1 cgitest  wheel  0 Feb 19 21:03 /tmp/t
id=uid=9000(cgitest) gid=9000(cgitest) groups=9000(cgitest)

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message