[Bug 64529] New: htcacheclean silently returns success on insufficient permission

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[Bug 64529] New: htcacheclean silently returns success on insufficient permission

Bugzilla from bugzilla@apache.org
https://bz.apache.org/bugzilla/show_bug.cgi?id=64529

            Bug ID: 64529
           Summary: htcacheclean silently returns success on insufficient
                    permission
           Product: Apache httpd-2
           Version: 2.4.41
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_cache
          Assignee: [hidden email]
          Reporter: [hidden email]
  Target Milestone: ---

Documentation at https://httpd.apache.org/docs/2.4/programs/htcacheclean.html
states:

> htcacheclean returns a zero status ("true") if all operations were successful, 1 otherwise.


If a user has access to /var/cache/apache2/mod_cache_disk/ but no access to
subdirectories (= no read/write permissions on the cache), as it's the case on
Debian-like system:
- On actual clean attempts does "An error occurred, cache cleaning aborted"
- But for read operations, htcacheclean behaves like if there was an existing
but empty cache: List no entries, returns 0.

=> There is no way to differentiate between a lack of permissions and an empty
cache.


NB: I hope one day we'll have a PHP-Apache function to clean the cache straight
from PHP ;)

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]