After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 607148 - Authorize gnomeweb account to access apache2 logs on progress
Authorize gnomeweb account to access apache2 logs on progress
Status: RESOLVED FIXED
Product: sysadmin
Classification: Infrastructure
Component: Other
unspecified
Other Linux
: Normal normal
: ---
Assigned To: GNOME Sysadmins
GNOME Sysadmins
Depends on:
Blocks:
 
 
Reported: 2010-01-16 16:36 UTC by Claude Paroz
Modified: 2010-09-05 16:48 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Claude Paroz 2010-01-16 16:36:00 UTC
When a Web application generates an error, it's often useful to see what's happening in Apache logs. But on progress, the gnomeweb account doesn't have the necessary rights to read them.
Comment 1 Claude Paroz 2010-04-17 19:23:16 UTC
Olav did setup appropriate permissions today. He's not sure this is permanent, though. So let's wait some days before closing the bug.
Comment 2 Claude Paroz 2010-04-19 08:36:10 UTC
I confirm that the read access permission is *not* permanent, so another solution should be found...
Comment 3 Christer Edwards 2010-09-01 13:51:44 UTC
@Olav - can you comment on what you implemented to initially give permissions, and what method we might employ to make it permanent?

Would it be something as simple as 'chown :gnomeweb logs/; chmod g+s logs/' ? (I'm completely guessing here, not being familiar with what was previously attempted.)
Comment 4 Olav Vitters 2010-09-05 13:47:43 UTC
From the httpd Puppet module:
        file {
                "/var/log/httpd":
                        ensure => directory,
                        mode => 750,
                        owner => root,
                        group => gnomeweb,
                        require => Package["httpd"]
        }


Suggest to hook progress up to Puppet (might not be easy, Puppet modules assume Red Hat).

Note: Previously, we changed above permissions using Cron.
Comment 5 Christer Edwards 2010-09-05 16:48:48 UTC
progress is now in puppet. (httpd module only)

file { "/var/log/apache2":
    ensure => directory,
    mode => 2750,
    owner => root,
    group => gnomeweb,
    require => Package["apache2"]
}

closing ticket. please re-open if this fix doesn't persist.