Package: lighttpd Version: 1.4.13-5 Severity: normal
In response to bug #398834, the following was added to lighttpd.postinst: chmod 0770 -R /var/log/lighttpd chmod 0660 /var/log/lighttpd/* First of all, there is no need for /var/log/lighttpd and its contents to be group-writable (and it didn't use to be before this version of the package). But this is not the problem. In my lighttpd setup with virtual hosts, my virtual host logs are in /var/log/lighttpd/<site name>/ (which is not very uncommon). Because of the chmod statements above, my directories have the following permissions: drw-rw---- And the files in the subdirectories: -rwxrwx--- Now lighttpd doesn't start anymore. Since the contents of the directories are not accessible for www-data anymore, lighttpd cannot access the log files for the virtual hosts, disables the logging plugin and quits. On most servers, I run my lighttpd under runit. Since lighttpd keeps crashing, runit keeps trying to start it. On some of my servers (those with Ruby on Rails projects), because of this bug, it keeps starting the Ruby on Rails projects every time it tries to start lighttpd (without killing the old ones first). On one server this has led to continuous swapping of memory and finally the use of the reset button was necessary to manually fix the lighttpd problem. -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-1-686 Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages lighttpd depends on: ii libattr1 2.4.32-1 Extended attribute shared library ii libbz2-1.0 1.0.3-6 high-quality block-sorting file co ii libc6 2.3.6.ds1-8 GNU C Library: Shared libraries ii libldap2 2.1.30-13.2 OpenLDAP libraries ii libpcre3 6.7-1 Perl 5 Compatible Regular Expressi ii libssl0.9.8 0.9.8c-4 SSL shared libraries ii lsb-base 3.1-22 Linux Standard Base 3.1 init scrip ii mime-support 3.37-1 MIME files 'mime.types' & 'mailcap ii perl 5.8.8-6.1 Larry Wall's Practical Extraction ii zlib1g 1:1.2.3-13 compression library - runtime Versions of packages lighttpd recommends: ii php4-cgi 6:4.4.4-8 server-side, HTML-embedded scripti -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
