Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of rich.geddes@verizon.net
 designates 206.46.173.3 as permitted sender)
Date: Tue, 26 Feb 2008 13:58:56 -0500
From: Richard Geddes <rich.geddes@verizon.net>
In-reply-to: <47C460C8.2070101@verizon.net>
To: users@httpd.apache.org
Message-id: <47C46170.4000008@verizon.net>
MIME-version: 1.0
Content-type: multipart/alternative;
 boundary="Boundary_(ID_Jq4BjQcyIDHqByakboDyVA)"
References: <47C2594C.30706@verizon.net>
 <e498c1660802250642o67b0913bxde00b407bf49c5ff@mail.gmail.com>
 <47C43968.2090004@verizon.net>
 <1204047623.10271.20.camel@athene.bestsolution.at>
 <47C460C8.2070101@verizon.net>
User-Agent: Thunderbird 2.0.0.6 (X11/20071022)
Subject: Re: [users@httpd] Question on permissions

--Boundary_(ID_Jq4BjQcyIDHqByakboDyVA)
Content-type: text/plain; charset=UTF-8
Content-transfer-encoding: 7BIT

... to see what exactly apache sees?

Richard Geddes wrote:
> U,
>
> Thanks... restarting or reloading seemed to apply the changes made to
> /etc/group file. 
>
> Is there a way to dump to screen the apache "environment stuff" to
> what exactly apache sees?  I looked at the man pages for apache2 and
> apache2ctl searching for 'environment' ... no matches.
>
> R
>
> Udo Rader wrote:
>> On Tue, 2008-02-26 at 11:08 -0500, Richard Geddes wrote:
>>   
>>> Thanks for the response.  
>>>
>>> I set up a directory under the main DocumentRoot called test 
>>>
>>> drwxr-xr-x 2 rgeddes rgeddes  80 2008-02-18 15:18 test
>>>
>>> and it appeared in a directory listing in the webpage of my main
>>> DocumentRoot.
>>>
>>> Changed permissions as follows:
>>>
>>> drwxr-x--- 2 rgeddes rgeddes  80 2008-02-18 15:18 test
>>>
>>> and test disappears from the webpage (this makes sense)
>>>
>>> changed group as follows:
>>>
>>> drwxr-x--- 2 rgeddes www-data  80 2008-02-18 15:18 test
>>>
>>> and test appears in the webpage (this makes sense) as the servers are
>>> running as www-data.
>>>
>>> Now if I change the group back to:
>>>
>>> drwxr-x--- 2 rgeddes rgeddes  80 2008-02-18 15:18 test
>>>
>>> and I add www-data to the rgeddes group in /etc/group, the directory
>>> fails to show up.  This does not make sense to me as www-data is part
>>> of the rgeddes group and rgeddes has r-x permissions.
>>>
>>> Is there a reason why www-data is not being granted rgeddes group
>>> permissions?
>>>     
>>
>> restart Apache. Apache, like any other UNIX process "rembers" some basic
>> "environmental" stuff, like the (secondary) group membership(s) of the
>> user it runs under.
>>
>> Restarting Apache makes it "refetch" this kind data.
>>   
>>   

--Boundary_(ID_Jq4BjQcyIDHqByakboDyVA)
Content-type: text/html; charset=UTF-8
Content-transfer-encoding: 8BIT

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
... to <font color="#cc0000">see</font> what
exactly apache sees?<br>
<br>
Richard Geddes wrote:
<blockquote cite="mid:47C460C8.2070101@verizon.net" type="cite">
  <meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
U,<br>
  <br>
Thanks... restarting or reloading seemed to apply the changes made to
/etc/group file.  <br>
  <br>
Is there a way to dump to screen the apache "environment stuff" to what
exactly apache sees?  I looked at the man pages for apache2 and
apache2ctl searching for 'environment' ... no matches.<br>
  <br>
R<br>
  <br>
Udo Rader wrote:
  <blockquote
 cite="mid:1204047623.10271.20.camel@athene.bestsolution.at" type="cite">
    <pre wrap="">On Tue, 2008-02-26 at 11:08 -0500, Richard Geddes wrote:
  </pre>
    <blockquote type="cite">
      <pre wrap="">Thanks for the response.  

I set up a directory under the main DocumentRoot called test 

drwxr-xr-x 2 rgeddes rgeddes  80 2008-02-18 15:18 test

and it appeared in a directory listing in the webpage of my main
DocumentRoot.

Changed permissions as follows:

drwxr-x--- 2 rgeddes rgeddes  80 2008-02-18 15:18 test

and test disappears from the webpage (this makes sense)

changed group as follows:

drwxr-x--- 2 rgeddes www-data  80 2008-02-18 15:18 test

and test appears in the webpage (this makes sense) as the servers are
running as www-data.

Now if I change the group back to:

drwxr-x--- 2 rgeddes rgeddes  80 2008-02-18 15:18 test

and I add www-data to the rgeddes group in /etc/group, the directory
fails to show up.  This does not make sense to me as www-data is part
of the rgeddes group and rgeddes has r-x permissions.

Is there a reason why www-data is not being granted rgeddes group
permissions?
    </pre>
    </blockquote>
    <pre wrap=""><!---->
restart Apache. Apache, like any other UNIX process "rembers" some basic
"environmental" stuff, like the (secondary) group membership(s) of the
user it runs under.

Restarting Apache makes it "refetch" this kind data.
  
  </pre>
  </blockquote>
</blockquote>
</body>
</html>

--Boundary_(ID_Jq4BjQcyIDHqByakboDyVA)--