maas-http service changing perms on system nginx paths

Bug #1869067 reported by Joshua McClintock
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MAAS
Fix Released
Medium
Alberto Donato
2.7
Fix Released
Medium
Alberto Donato

Bug Description

I see this option set in /var/lib/maas/http/nginx.conf:

    # LP: #1796224 - Use a different path otherwise this will
    # conflict with the system's nginx daemon.
    client_body_temp_path /var/lib/maas/http/body;

However, there are 4 other paths which need to be added as well.

   proxy_temp_path /var/lib/maas/http/proxy;
   fastcgi_temp_path /var/lib/maas/http/fastcgi;
   scgi_temp_path /var/lib/maas/http/scgi;
   uwsgi_temp_path /var/lib/maas/http/uwsgi;

Here is what happens if they aren't.

1. Correct perms on system nginx

root@node:/var/lib/nginx# ls -la
total 28
drwxr-xr-x 7 root root 4096 Oct 2 16:18 .
drwxr-xr-x 50 root root 4096 Nov 27 10:13 ..
drwx------ 2 www-data root 4096 Oct 2 16:18 body
drwx------ 2 www-data root 4096 Oct 2 16:18 fastcgi
drwx------ 9 www-data root 4096 Mar 10 14:49 proxy
drwx------ 2 www-data root 4096 Oct 2 16:18 scgi
drwx------ 2 www-data root 4096 Oct 2 16:18 uwsgi

2. Restart maas-http service and perms get changed on the other 4 dirs

root@node:/var/lib/nginx# service maas-http restart
root@node:/var/lib/nginx# ls -la
total 28
drwxr-xr-x 7 root root 4096 Oct 2 16:18 .
drwxr-xr-x 50 root root 4096 Nov 27 10:13 ..
drwx------ 2 www-data root 4096 Oct 2 16:18 body
drwx------ 2 nobody root 4096 Oct 2 16:18 fastcgi
drwx------ 9 nobody root 4096 Mar 10 14:49 proxy
drwx------ 2 nobody root 4096 Oct 2 16:18 scgi
drwx------ 2 nobody root 4096 Oct 2 16:18 uwsgi

3. Restart system nginx and they go back to normal

root@node:/var/lib/nginx# service nginx restart
root@node:/var/lib/nginx# ls -la
total 28
drwxr-xr-x 7 root root 4096 Oct 2 16:18 .
drwxr-xr-x 50 root root 4096 Nov 27 10:13 ..
drwx------ 2 www-data root 4096 Oct 2 16:18 body
drwx------ 2 www-data root 4096 Oct 2 16:18 fastcgi
drwx------ 9 www-data root 4096 Mar 10 14:49 proxy
drwx------ 2 www-data root 4096 Oct 2 16:18 scgi
drwx------ 2 www-data root 4096 Oct 2 16:18 uwsgi

Related branches

Alberto Donato (ack)
Changed in maas:
status: New → Triaged
assignee: nobody → Alberto Donato (ack)
importance: Undecided → Medium
milestone: none → 2.8.0b1
Alberto Donato (ack)
Changed in maas:
status: Triaged → In Progress
Changed in maas:
status: In Progress → Fix Committed
Alberto Donato (ack)
Changed in maas:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.