Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 259220 - www-apps/bugzilla-3.2 + apache with fastcgi and suexec: Multiple installations impossible due to permissions
Summary: www-apps/bugzilla-3.2 + apache with fastcgi and suexec: Multiple installation...
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Web Application Packages Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-16 13:54 UTC by xammy
Modified: 2009-06-28 17:49 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description xammy 2009-02-16 13:54:42 UTC
When installing web-apps/bugzilla-3.2, all the .cgi files are created as hard links to the corresponding files in /usr/share/webapps, owned by root. In a shared-hosting environment with apache, fastcgi and suexec, the user who runs a webscript is determined by the directory of the virtual host and the file permissions (which must match in some way). Of course, suexec refuses to run those cgi scripts as root!

An adequate fix would be to copy all .cgi instead of making hard links. This might also be controllable by use flags (e.g. suexec).

Reproducible: Always

Steps to Reproduce:
1. Install a running apache/fastcgi/suexec constellation
2. Install bugzilla into two webroots
3. chown -R webroots to their corresponding (different!) users
4. chown -R root:root /usr/share/webapps 

Actual Results:  
You get an "Internal Server Error" by apache and suexec_log results in "target uid/gid (webroot-uid,webroot-gid) mismatch with directory (webroot-uid,webroot-gid) or program (0/0)".

Expected Results:  
Landing page of bugzilla
Comment 1 Benedikt Böhm (RETIRED) gentoo-dev 2009-06-28 17:49:13 UTC
hard linking is how webapp-config works. the real 'fix' would be to add copy support to webapp-config. as a workaround you can install it manually, of course, by copying the bugzilla cgi files (or you run mpm itk/peruser to get rid of the suxec cruft)