egroupware etemplate/doc directory not correctly detected

Bug #429254 reported by nils
24
This bug affects 4 people
Affects Status Importance Assigned to Milestone
egroupware (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

lsb_release -rd
Description: Ubuntu karmic (development branch)
Release: 9.10
from 2009-09-14

installing works fine, during the setup there is this error:
This might take a while, please wait ...
ErrorChecking file-permissions of .././etemplate/doc for not world writable:
.././etemplate/doc does not exist !!!

but:

nils@kfunambol:~$ locate etemplate/doc
/usr/share/egroupware/etemplate/doc
nils@kfunambol:~$ ll /usr/share/egroupware/etemplate/doc
lrwxrwxrwx 1 root root 30 2009-09-14 09:55 /usr/share/egroupware/etemplate/doc -> ../../doc/egroupware-etemplate/
nils@kfunambol:~$ ll /usr/share/doc/egroupware-etemplate/
total 568
drwxr-xr-x 3 root root 4096 2009-09-14 09:55 ./
drwxr-xr-x 1223 root root 45056 2009-09-14 10:34 ../
-rw-r--r-- 1 root root 5780 2009-04-29 12:40 changelog.Debian.gz
-rw-r--r-- 1 root root 1222 2009-04-29 12:40 copyright
-rw-r--r-- 1 root root 46400 2009-04-29 12:40 dbtools.jpg
-rw-r--r-- 1 root root 27258 2009-04-29 12:40 etemplate.html
drwxr-xr-x 5 root root 4096 2009-09-14 09:55 et_media/
-rw-r--r-- 1 root root 19917 2009-04-29 12:40 gtk.png
-rw-r--r-- 1 root root 49424 2009-04-29 12:40 reference.html
-rw-r--r-- 1 root root 57869 2009-04-29 12:40 step0.jpg
-rw-r--r-- 1 root root 30242 2009-04-29 12:40 step1.jpg
-rw-r--r-- 1 root root 30303 2009-04-29 12:40 step2.jpg
-rw-r--r-- 1 root root 34021 2009-04-29 12:40 step3.jpg
-rw-r--r-- 1 root root 22168 2009-04-29 12:40 step4.jpg
-rw-r--r-- 1 root root 35207 2009-04-29 12:40 step5.jpg
-rw-r--r-- 1 root root 32697 2009-04-29 12:40 step6.jpg
-rw-r--r-- 1 root root 52486 2009-04-29 12:40 step7.jpg
-rw-r--r-- 1 root root 37393 2009-04-29 12:40 step8.jpg
nils@kfunambol:~$

...so it appears that the privs of the LINK are being checked, and that basically symlinks here are not handled correctly.

Revision history for this message
nils (internationils) wrote :
Revision history for this message
wayward4now (wayward4now) wrote :

Would be nice to see an update of this package, with the link fixed, as the egroupware website is reporting security risks. Thanks for the hard work, Ric

Revision history for this message
Niels Egberts (nielsegberts) wrote :

I confirm on 9.10

Changed in egroupware (Ubuntu):
status: New → Confirmed
Revision history for this message
RalfBecker (ralfbecker) wrote :

I fixed this bug upstream about a month ago:
http://www.egroupware.org/viewvc/egroupware?view=rev&revision=27969

It will be in the next maintenance and bugfix release, thought we have
none scheduled so far.

Ralf

Revision history for this message
Immeëmosol (imme-emosol) wrote :

Same on Lucid 10.04 RC.
Is there a maintenance and bugfix release scheduled
or is there somewhere to find an update on this information from time to time?

Revision history for this message
Immeëmosol (imme-emosol) wrote :

lame "fix" :

# rm /usr/share/egroupware/etemplate/doc
# cp -a /usr/share/doc/egroupware-etemplate/ /usr/share/egroupware/etemplate/doc
# rm -r /usr/share/doc/egroupware-etemplate
# ln -s /usr/share/egroupware/etemplate/doc /usr/share/doc/egroupware-etemplate

Revision history for this message
Michael Evans (mjevans1983) wrote :

Better fix:

sudo editor /etc/apache2/conf.d/egroupware

Change this line to add /usr/share/doc (permissive; or have the packages it's split across added)

  php_admin_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/share/php:/usr/share/doc

NOTE: You should also add whatever storage directory you are using to this path.

Revision history for this message
jarda (jkratoch) wrote :

Lucid Lynx (10.04.4 LTS) is still affected by this bug (egroupware package version 1.6.001+dfsg-2).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.