You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2016/10/06 10:44:35 UTC

[Bug 60209] New: user wich run cgi script

https://bz.apache.org/bugzilla/show_bug.cgi?id=60209

            Bug ID: 60209
           Summary: user wich run cgi script
           Product: Apache httpd-2
           Version: 2.2.27
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_cgi
          Assignee: bugs@httpd.apache.org
          Reporter: alcol@hotmail.com

Hi, I created some CGI some years ago. We used for years and from some , we
stopped from using them.

Apache version is:

Server version: Apache/2.2.27 (Unix)
Server built:   Jun 17 2015 12:37:48

CGI subdir is well declared and no configuration has changed.

IS POSSIBLE I upgraded Apache ever 2.2.x but some minor relase UP from original
one, I don't remember so well.

inside CGI I point to file that are outside APACHE install dir and ever worked.
File are set with file permission Owner and Group that let apache to access
them. User owner is set with the same wich HTTPD is running (apache:apache).

Inside error.log I read        Access Denied

I used google a bit but unable to find if something is changed in CGI handling.

Inside CGI I perform some "cat" statement and i read  Access Denied on the file
that should be read from cat statement. 

Changing file permission granting to everyone read and write , it work. File
owner is apache that have RW ........ 

something changed ?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60209] user wich run cgi script

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60209

--- Comment #1 from Alberto Colosi <al...@hotmail.com> ---

My cgi use read or write files on all the machine , I have reactivated cgi , no
changes in httpd.conf or cgi (possible I was using an apache 2.2.x lower then
2.2.27)

[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y]
/usr/local/apache2/cgi-bin/portal.cgi: line 61:
/usr/local/squid/expira/tmp/scp-mail.tmp: Permission denied
[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y]
/usr/local/apache2/cgi-bin/portal.cgi: line 62:
/usr/local/squid/expira/tmp/scp-mail.tmp: Permission denied
[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y]
/usr/local/apache2/cgi-bin/portal.cgi: line 63:
/usr/local/squid/expira/tmp/scp-mail.tmp: Permission denied
[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y]
/usr/local/apache2/cgi-bin/portal.cgi: line 64:
/usr/local/squid/expira/tmp/scp-mail.tmp: Permission denied
[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y]
/usr/local/apache2/cgi-bin/portal.cgi: line 65:
/usr/local/squid/expira/tmp/scp-mail.tmp: Permission denied
[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y]
/usr/local/apache2/cgi-bin/portal.cgi: line 66:
/usr/local/squid/expira/tmp/scp-mail.tmp: Permission denied
[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y] rm: cannot remove
`/usr/local/squid/expira/tmp/scp-mail.tmp': Permission denied
[Fri Oct 07 16:21:53 2016] [error] [client x.y.x.y] cat:
/usr/local/squid/expira/etc/portal.html: Permission denied

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60209] user wich run cgi script

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60209

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |INVALID
             Status|NEW                         |RESOLVED

--- Comment #2 from Eric Covener <co...@gmail.com> ---
Bugzilla is for reporting specific bugs, not for support. I'd suggest
users@httpd.apache.org or ServerFault.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org