Bug #979

fcgi+execwrap conflicts with index-file.names

Added by zikzik 689 days ago. Updated 55 days ago.

Status:Invalid Start:
Priority:Normal Due date:
Assigned to:- % Done:

0%
Category:core
Target version:-
Pending:

No

 Resolution:

invalid
Patch available:

Description

I run php-fcgi with execwrap (for proper isolation).
Each vhost runs php scripts under own UID/GID.
For security, php scripts have 0640 modes, thus they are unreadable by lighty itself (I use check-local=>disable in fcgi config.).
The problem is, index.php files must be 0644 or we get 403.
(non-index php files work correctly with 0640)

This is because mod_indexfile uses stat_cache_get_entry() which checks for file readability and returns EACCESS in this case, and mod_indexfile immediately translates this to 403.
This might be a shortcut, but if we have fcgi and suexec this shortcut leads to missing functionality.

lighttpd-1.3.14-indexfile-mode-fcgi.diff - patch for mod_indexfile to handle unreadable index.php files (721 Bytes) zikzik, 01/16/2007 01:52 AM

History

04/24/2008 09:13 PM - stbuehler

  • Status changed from New to Fixed
  • Resolution set to invalid

mod-indexfile is made for choosing between different index filenames. What you want is just a simple rewrite rule; append 'index.php' at every path ending in '/'.

10/10/2008 06:53 PM - stbuehler

  • Status changed from Fixed to Invalid

Also available in: Atom PDF