Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 395331 - dev-db/postgresql-server - incorrect permissions on /var/run/postgresql/
Summary: dev-db/postgresql-server - incorrect permissions on /var/run/postgresql/
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: PgSQL Bugs
URL:
Whiteboard:
Keywords:
: 422831 449400 (view as bug list)
Depends on:
Blocks:
 
Reported: 2011-12-20 00:18 UTC by Joseph
Modified: 2013-01-28 02:33 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Joseph 2011-12-20 00:18:14 UTC
Postgresql installation directory has a wrong permission:
New installation is:
drwxrwx--- 2 postgres postgres 4096 Dec 19 13:21 /var/run/postgresql/ 

it should be:
drwxrwx--x 2 postgres postgres 4096 Dec 14 19:57 /var/run/postgresql/

otherwise user gets an apache error:
ERROR - could not connect to server: Permission denied
Is the server running locally and accepting connection to Unix domain socket "/var/run/postgresql/.s.PGSQL.5432"?


Reproducible: Always




emerge --info
Portage 2.1.10.11 (default/linux/amd64/10.0/desktop, gcc-4.5.3, glibc-2.13-r4, 3.1.5-gentoo x86_64)
=================================================================
System uname: Linux-3.1.5-gentoo-x86_64-AMD_FX-tm-8150_Eight-Core_Processor-with-gentoo-2.0.3
Timestamp of tree: Sat, 17 Dec 2011 21:45:01 +0000
app-shells/bash:          4.1_p9
dev-java/java-config:     2.1.11-r3
dev-lang/python:          2.7.2-r3, 3.1.4-r3
dev-util/cmake:           2.8.6-r4
dev-util/pkgconfig:       0.26
sys-apps/baselayout:      2.0.3
sys-apps/openrc:          0.9.4
sys-apps/sandbox:         2.5
sys-devel/autoconf:       2.13, 2.68
sys-devel/automake:       1.11.1
sys-devel/binutils:       2.21.1-r1
sys-devel/gcc:            4.5.3-r1
sys-devel/gcc-config:     1.4.1-r1
sys-devel/libtool:        2.4-r1
sys-devel/make:           3.82-r1
sys-kernel/linux-headers: 2.6.39 (virtual/os-headers)
sys-libs/glibc:           2.13-r4
Repositories: gentoo
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA googleearth PUEL dlj-1.1 Oracle-BCLA-JavaSE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -Os -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=native -Os -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--autounmask=n"
FEATURES="assume-digests binpkg-logs distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
FFLAGS=""
GENTOO_MIRRORS="http://mirror.csclub.uwaterloo.ca/gentoo-distfiles/ ftp://mirror.csclub.uwaterloo.ca/gentoo-distfiles/ http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ ftp://linux.rz.ruhr-uni-bochum.de/gentoo-mirror/ ftp://ftp.spline.inf.fu-berlin.de/mirrors/gentoo/ http://ftp.spline.inf.fu-berlin.de/mirrors/gentoo/"
LANG="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en"
MAKEOPTS="-j9 --load-average=8"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync16.de.gentoo.org/gentoo-portage"
USE="X a52 aac acpi alsa amd64 bluetooth branding bzip2 cairo cdda cdr cgi cli consolekit consolkit cracklib crypt cups cxx dbus dri dts dvd dvdr emboss encode exif fam firefox flac foomaticdb fortran gdbm gdu gif gimp gimpprint gpm gtk iconv ipv6 java jpeg lcms ldap libnotify lock mad mmx mng modules mp3 mp4 mpeg mudflap multilib mysql ncurses nls nptl nptlonly ogg opengl openmp pam pango pcre pdf png policykit ppds pppd qt3support qt4 readline scanner sdl session spache2 spell sse sse2 ssl startup-notification svg sysfs tcpd tetexspell thunar tiff truetype trutype type1 udev unicode usb vorbis x264 xcb xml xorg xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="fbdev glint intel mach64 mga neomagic nouveau nv r128 radeon savage sis tdfx trident vesa via vmware dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Aaron W. Swenson gentoo-dev 2011-12-20 14:54:05 UTC
You must add the user Apache is running under to the 'postgres' group.

This is documented in the quick start guide and in the post-install message.
Comment 2 Joseph 2011-12-20 20:21:01 UTC
Yes this information was in quick install guide but NOT in post install message.

Here are the messages after I emerge potgresql-server;

If you have users and/or services that you would like to utilize the socket,
you must add them to the 'postgres' system group:
    usermod -a -G postgres <user>

Before initializing the database, you may want to edit PG_INITDB_OPTS so that
it contains your preferred locale in:
    /etc/conf.d/postgresql-9.1

Then, execute the following command to setup the initial database
environment:
emerge --config =dev-db/postgresql-server-9.1.1


Next, is the message after user run: emerge --config ...

Configuring pkg...

 * You can modify the paths and options passed to initdb by editing:
 *     /etc/conf.d/postgresql-9.1
 * 
 * Information on options that can be passed to initdb are found at:
 *     http://www.postgresql.org/docs/9.1/static/creating-cluster.html
 *     http://www.postgresql.org/docs/9.1/static/app-initdb.html
 * 
 * PG_INITDB_OPTS is currently set to:
 *     (none)
 * 
 * Configuration files will be installed to:
 *     /etc/postgresql-9.1/
 * 
 * The database cluster will be created in:
 *     /var/lib/postgresql/9.1/data
 * 
 * Are you ready to continue? (y/n)
y
 * Checking system parameters...
 * Checking whether your system supports at least 128 connections...
 * Passed.
 * Creating the data directory ...
 * Initializing the database ...
The files belonging to this database system will be owned by user "postgres".
This user must also own the server process.

The database cluster will be initialized with locale en_US.UTF-8.
The default database encoding has accordingly been set to UTF8.
The default text search configuration will be set to "english".

fixing permissions on existing directory /var/lib/postgresql/9.1/data ... ok
creating subdirectories ... ok
selecting default max_connections ... 100
selecting default shared_buffers ... 24MB
creating configuration files ... ok
creating template1 database in /var/lib/postgresql/9.1/data/base/1 ... ok
initializing pg_authid ... ok
initializing dependencies ... ok
creating system views ... ok
loading system objects' descriptions ... ok
creating collations ... ok
creating conversions ... ok
creating dictionaries ... ok
setting privileges on built-in objects ... ok
creating information schema ... ok
loading PL/pgSQL server-side language ... ok
vacuuming database template1 ... ok
copying template1 to template0 ... ok
copying template1 to postgres ... ok

WARNING: enabling "trust" authentication for local connections
You can change this by editing pg_hba.conf or using the -A option the
next time you run initdb.

Success. You can now start the database server using:

    /usr/lib64/postgresql-9.1/bin/postgres -D /var/lib/postgresql/9.1/data
or
    /usr/lib64/postgresql-9.1/bin/pg_ctl -D /var/lib/postgresql/9.1/data -l logfile start

 * The autovacuum function, which was in contrib, has been moved to the main
 * PostgreSQL functions starting with 8.1, and starting with 8.4 is now enabled
 * by default. You can disable it in the cluster's:
 *     /etc/postgresql-9.1/postgresql.conf
 * 
 * The PostgreSQL server, by default, will log events to:
 *     /var/lib/postgresql/9.1/data/postmaster.log
 * 
 * You should use the '/etc/init.d/postgresql-9.1' script to run PostgreSQL
 * instead of 'pg_ctl'.

Can you point me to the information where user is instructing to add group "postgres" to apache?
Comment 3 Aaron W. Swenson gentoo-dev 2011-12-21 12:52:16 UTC
(In reply to comment #2)
> Yes this information was in quick install guide but NOT in post install
> message.
...
> Can you point me to the information where user is instructing to add group
> "postgres" to apache?

Yes, I can:

> Here are the messages after I emerge potgresql-server;
> 
> If you have users and/or services that you would like to utilize the socket,
> you must add them to the 'postgres' system group:
>     usermod -a -G postgres <user>

You quoted it.

'apache' isn't the only user that may need to be added to the 'postgres' group.
Comment 4 Joseph 2011-12-21 15:44:57 UTC
I don't consider apache as a user (it doesn't have a home directory).
For me user on the system is anybody whom I add after installing the OS.
So maybe this is the part I'm confused about or the post installation instructions are not clear.

In addition, in the past there was no need to add "apache" to postgre group.
In the new installation the permission of the directory had changed to: 
drwxrwx--- 2 postgres postgres 4096 Dec 19 13:21 /var/run/postgresql/ 

but the post installation instruction did not changed. 
I waisted almost 2-days trying to solve this problem, so I'm not happy about it.

Another (-) for Gentoo.
Comment 5 Aaron W. Swenson gentoo-dev 2012-06-21 12:14:14 UTC
*** Bug 422831 has been marked as a duplicate of this bug. ***
Comment 6 Aaron W. Swenson gentoo-dev 2013-01-28 02:33:19 UTC
*** Bug 449400 has been marked as a duplicate of this bug. ***