Change defaults to run Apache as www-data and log to /var/log/

Bug #1054178 reported by Alex Lazar
12
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Evergreen
Triaged
Wishlist
Unassigned

Bug Description

Apache is currently set to run as the opensrf user in order to write logs to /openils/var/log/, which is owned by opensrf user. This is a deviation from Apache and system defaults and is not strictly necessary.

Apache logging defaults should be set to log to /var/log/, and then Apache can run by default as www-data.

Revision history for this message
Thomas Berezansky (tsbere) wrote :

I believe (but am not positive) that this is also needed for offline transaction uploading, as to my knowledge that writes actual files that opensrf perm users would need to read later.

Revision history for this message
Jason Etheridge (phasefx) wrote : Re: [Bug 1054178] Re: Change defaults to run Apache as www-data and log to /var/log/

> I believe (but am not positive) that this is also needed for offline
> transaction uploading, as to my knowledge that writes actual files that
> opensrf perm users would need to read later.

I think since those are created by CGI scripts and not Apache modules,
we could use SUID or somesuch for them.

-- Jason

Revision history for this message
Galen Charlton (gmc) wrote :

I concur in your belief that offline circ uploads would have to be handled as well.

Revision history for this message
Bill Erickson (berick) wrote :

Vandelay file uploads should be writable by opensrf as well. Files are uploaded via mod_perl and later deleted by drones. Though, we could change the code, of course. They don't have to be deleted in real time by the drones.

Ben Shum (bshum)
Changed in evergreen:
status: New → Triaged
importance: Undecided → Wishlist
milestone: none → 2.4.0-alpha
Ben Shum (bshum)
Changed in evergreen:
milestone: 2.4.0-alpha1 → 2.4.0-beta
Ben Shum (bshum)
Changed in evergreen:
milestone: 2.4.0-beta → 2.4.0-rc
Ben Shum (bshum)
tags: added: apache installation
Changed in evergreen:
milestone: 2.4.0-rc → 2.5.0-alpha
Dan Wells (dbw2)
Changed in evergreen:
milestone: 2.5.0-m1 → none
Revision history for this message
Jason Boyer (jboyer) wrote :

I just happened to notice this bug while searching for something else and I agree it's the way to go (though I don't have strong feelings about where it's logged). The way I've always handled this was to change the necessary directories (/openils/var/data/offline and /openils/var/data/vandelay now that /tmp is a bad idea) to be owned by opensrf:www-data and make them group writable.

If no one sees any reason to avoid doing this I can look into putting a docs change branch together.

tags: added: install-upgrade
removed: installation
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.