[Bug 63908] New: Alternate Group setting prevents access to CGI pipe

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[Bug 63908] New: Alternate Group setting prevents access to CGI pipe

Bugzilla from bugzilla@apache.org
https://bz.apache.org/bugzilla/show_bug.cgi?id=63908

            Bug ID: 63908
           Summary: Alternate Group setting prevents access to CGI pipe
           Product: Apache httpd-2
           Version: 2.4.37
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_cgi
          Assignee: [hidden email]
          Reporter: [hidden email]
  Target Milestone: ---

CentOS Linux release 8.0.1905 (Core)

Pipe directory created with ownership in /var/run:
drwx--x---  3 root           apache          100 Nov  7 11:24 httpd

httpd.conf contains:

# User/Group: The name (or #number) of the user/group to run httpd as.
# It is usually good practice to create a dedicated user and group for
# running httpd, as with most system services.
#
User apache
Group webmaster

Error log when attempting to execute cgi:

[Thu Nov 07 11:27:55.191570 2019] [cgid:error] [pid 1342:tid 140405416908544]
(13)Permission denied: [client 192.168.0.12:40352] AH01257: unable to connect
to cgi daemon after multiple tries: /usr2/www/toolz/orion/cgi-bin/finance.cgi

Solution is to change ownership of /var/run/httpd:

drwx--x---  3 root           webmaster       100 Nov  7 11:49 httpd

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]