| 2013-11-17 01:20:33 |
Arul |
bug |
|
|
added bug |
| 2013-11-17 16:48:56 |
Robie Basak |
apache2 (Ubuntu): status |
New |
Triaged |
|
| 2013-11-17 16:50:23 |
Robie Basak |
apache2 (Ubuntu): importance |
Undecided |
Critical |
|
| 2013-11-17 16:50:25 |
Robie Basak |
apache2 (Ubuntu): importance |
Critical |
Medium |
|
| 2013-11-17 16:50:53 |
Robie Basak |
bug watch added |
|
http://issues.apache.org/bugzilla/show_bug.cgi?id=55787 |
|
| 2013-11-17 16:50:53 |
Robie Basak |
bug task added |
|
apache2 |
|
| 2013-11-17 17:03:46 |
Robie Basak |
bug |
|
|
added subscriber Robie Basak |
| 2013-11-17 21:00:14 |
Stefan Fritsch |
attachment added |
|
patch against 2.4.6-2 https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1251939/+attachment/3911233/+files/unixd-fix.patch |
|
| 2013-11-18 00:19:22 |
Ubuntu Foundations Team Bug Bot |
tags |
apache2 |
apache2 patch |
|
| 2013-11-18 00:19:33 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Review Team |
| 2013-11-28 17:19:01 |
Robie Basak |
apache2 (Ubuntu): status |
Triaged |
Fix Committed |
|
| 2013-11-28 17:19:08 |
Robie Basak |
nominated for series |
|
Ubuntu Saucy |
|
| 2013-11-28 17:19:08 |
Robie Basak |
bug task added |
|
apache2 (Ubuntu Saucy) |
|
| 2013-11-28 17:19:16 |
Robie Basak |
apache2 (Ubuntu Saucy): status |
New |
Triaged |
|
| 2013-11-28 17:19:19 |
Robie Basak |
apache2 (Ubuntu Saucy): importance |
Undecided |
Medium |
|
| 2013-11-28 17:40:10 |
Robie Basak |
description |
I have set my chroot directory as shown below.
ChrootDir /var/www
When started with the above chroot setting, apache2 exits with the following error
[Sat Nov 16 13:52:40.621872 2013] [unixd:alert] [pid 3747] (34)Numerical result out of range: AH02158: Cannot chroot when not started as root
NOTE: apache2 is started as 'root' user. This was reported as a bug in apache.org earlier (link below) where it was confirmed this is fixed in a trunk.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55787
Details of my Ubuntu server:
-------------------------------------------------
root@gorilla:~# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=13.10
DISTRIB_CODENAME=saucy
DISTRIB_DESCRIPTION="Ubuntu 13.10"
root@gorilla:~# apache2ctl -v
Server version: Apache/2.4.6 (Ubuntu)
Server built: Aug 9 2013 14:31:04
root@gorilla:~# apache2ctl -l -M
Compiled in modules:
core.c
mod_so.c
mod_watchdog.c
http_core.c
mod_log_config.c
mod_logio.c
mod_version.c
mod_unixd.c
mod_unixd.c |
[Impact]
The Apache ChrootDir doesn't work, causing Apache to fail if you try to use it. This means that it is not possible to run Apache in a chroot, which is a regression from 13.04.
[Development Fix]
Adjust build system to not use things inside .pc/. This also requires the regeneration of debian/patches/itk-rerun-configure.patch.
[Stable Fix]
Same as development fix.
[Test Case]
In included dep8 test. Install dpkg-dev and wget, then run "sh debian/tests/chroot". This requires root, and will clobber your Apache installation, so do this only on a fresh install that you can throw away afterwards.
[Regression Potential]
Having to adjust the build system is not ideal, and could impact anything. But what was being done before is obviously flawed, and could introduce other problems not yet reported.
On balance, I think it is worth the SRU, since the unknowns also include other bugs that we don't know about.
It might be worth mandating additional verification here, though, or a longer than normal aging period.
I will leave the SRU team to decide.
[Original Description]
I have set my chroot directory as shown below.
ChrootDir /var/www
When started with the above chroot setting, apache2 exits with the following error
[Sat Nov 16 13:52:40.621872 2013] [unixd:alert] [pid 3747] (34)Numerical result out of range: AH02158: Cannot chroot when not started as root
NOTE: apache2 is started as 'root' user. This was reported as a bug in apache.org earlier (link below) where it was confirmed this is fixed in a trunk.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55787
Details of my Ubuntu server:
-------------------------------------------------
root@gorilla:~# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=13.10
DISTRIB_CODENAME=saucy
DISTRIB_DESCRIPTION="Ubuntu 13.10"
root@gorilla:~# apache2ctl -v
Server version: Apache/2.4.6 (Ubuntu)
Server built: Aug 9 2013 14:31:04
root@gorilla:~# apache2ctl -l -M
Compiled in modules:
core.c
mod_so.c
mod_watchdog.c
http_core.c
mod_log_config.c
mod_logio.c
mod_version.c
mod_unixd.c
mod_unixd.c |
|
| 2013-11-28 17:41:47 |
Robie Basak |
description |
[Impact]
The Apache ChrootDir doesn't work, causing Apache to fail if you try to use it. This means that it is not possible to run Apache in a chroot, which is a regression from 13.04.
[Development Fix]
Adjust build system to not use things inside .pc/. This also requires the regeneration of debian/patches/itk-rerun-configure.patch.
[Stable Fix]
Same as development fix.
[Test Case]
In included dep8 test. Install dpkg-dev and wget, then run "sh debian/tests/chroot". This requires root, and will clobber your Apache installation, so do this only on a fresh install that you can throw away afterwards.
[Regression Potential]
Having to adjust the build system is not ideal, and could impact anything. But what was being done before is obviously flawed, and could introduce other problems not yet reported.
On balance, I think it is worth the SRU, since the unknowns also include other bugs that we don't know about.
It might be worth mandating additional verification here, though, or a longer than normal aging period.
I will leave the SRU team to decide.
[Original Description]
I have set my chroot directory as shown below.
ChrootDir /var/www
When started with the above chroot setting, apache2 exits with the following error
[Sat Nov 16 13:52:40.621872 2013] [unixd:alert] [pid 3747] (34)Numerical result out of range: AH02158: Cannot chroot when not started as root
NOTE: apache2 is started as 'root' user. This was reported as a bug in apache.org earlier (link below) where it was confirmed this is fixed in a trunk.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55787
Details of my Ubuntu server:
-------------------------------------------------
root@gorilla:~# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=13.10
DISTRIB_CODENAME=saucy
DISTRIB_DESCRIPTION="Ubuntu 13.10"
root@gorilla:~# apache2ctl -v
Server version: Apache/2.4.6 (Ubuntu)
Server built: Aug 9 2013 14:31:04
root@gorilla:~# apache2ctl -l -M
Compiled in modules:
core.c
mod_so.c
mod_watchdog.c
http_core.c
mod_log_config.c
mod_logio.c
mod_version.c
mod_unixd.c
mod_unixd.c |
[Impact]
The Apache ChrootDir directive doesn't work, causing Apache to fail if you try to use it. This means that it is not possible to run Apache in a chroot, which is a regression from 13.04.
[Development Fix]
Adjust build system to not use things inside .pc/. This also requires the regeneration of debian/patches/itk-rerun-configure.patch.
[Stable Fix]
Same as development fix.
[Test Case]
In included dep8 test. Install dpkg-dev and wget, then run "sh debian/tests/chroot". This requires root, and will clobber your Apache installation, so do this only on a fresh install that you can throw away afterwards.
[Regression Potential]
Having to adjust the build system is not ideal, and could impact anything. But what was being done before is obviously flawed, and could introduce other problems not yet reported.
On balance, I think it is worth the SRU, since the unknowns also include other bugs that we don't know about.
It might be worth mandating additional verification here, though, or a longer than normal aging period.
I will leave the SRU team to decide.
[Original Description]
I have set my chroot directory as shown below.
ChrootDir /var/www
When started with the above chroot setting, apache2 exits with the following error
[Sat Nov 16 13:52:40.621872 2013] [unixd:alert] [pid 3747] (34)Numerical result out of range: AH02158: Cannot chroot when not started as root
NOTE: apache2 is started as 'root' user. This was reported as a bug in apache.org earlier (link below) where it was confirmed this is fixed in a trunk.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55787
Details of my Ubuntu server:
-------------------------------------------------
root@gorilla:~# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=13.10
DISTRIB_CODENAME=saucy
DISTRIB_DESCRIPTION="Ubuntu 13.10"
root@gorilla:~# apache2ctl -v
Server version: Apache/2.4.6 (Ubuntu)
Server built: Aug 9 2013 14:31:04
root@gorilla:~# apache2ctl -l -M
Compiled in modules:
core.c
mod_so.c
mod_watchdog.c
http_core.c
mod_log_config.c
mod_logio.c
mod_version.c
mod_unixd.c
mod_unixd.c |
|
| 2013-11-28 19:07:52 |
Launchpad Janitor |
apache2 (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2013-12-05 18:19:15 |
Brian Murray |
apache2 (Ubuntu Saucy): status |
Triaged |
Fix Committed |
|
| 2013-12-05 18:19:17 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2013-12-05 18:19:21 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2013-12-05 18:19:31 |
Brian Murray |
tags |
apache2 patch |
apache2 patch verification-needed |
|
| 2013-12-07 09:22:47 |
Miklos Juhasz |
tags |
apache2 patch verification-needed |
apache2 patch verification-done |
|
| 2013-12-12 20:13:48 |
Brian Murray |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2013-12-12 20:19:13 |
Launchpad Janitor |
apache2 (Ubuntu Saucy): status |
Fix Committed |
Fix Released |
|
| 2019-01-07 08:23:22 |
Bug Watch Updater |
apache2: status |
Unknown |
Fix Released |
|
| 2019-01-07 08:23:22 |
Bug Watch Updater |
apache2: importance |
Unknown |
High |
|
