Am 14.03.2012 17:30, schrieb Uwe Kerstan: > Dear Patrick, > > Thank you for your support. > > The problem with the temporary file is solved, but there is a further problem. > (Info: I'm now working with version 3.1.2+dfsg1-2) > > Some information about my setup: > > # ls -ld /usr/share/otrs/Kernel/Config/Files > drwxr-xr-x 2 root root 4096 14. Mär 16:34 /usr/share/otrs/Kernel/Config/Files > > # ls -l /usr/share/otrs/Kernel/Config/Files > -rw-r--r-- 1 root root 111152 6. Nov 16:31 Deprecated.xml > -rw-r--r-- 1 root root 281418 11. Mär 16:43 Framework.xml > -rw-r--r-- 1 root root 23118 26. Jan 13:37 GenericInterface.xml > -rw-r--r-- 1 root root 3942 15. Jul 2011 Scheduler.xml > -rw-r--r-- 1 root root 409976 1. Mär 14:02 Ticket.xml > lrwxrwxrwx 1 root root 32 14. Mär 16:34 ZZZAAuto.pm -> > /var/lib/otrs/Config/ZZZAAuto.pm > lrwxrwxrwx 1 root root 31 14. Mär 16:39 ZZZAuto.pm -> > /var/lib/otrs/Config/ZZZAuto.pm > > # ls -ld /var/lib/otrs/Config > drwxrwxr-x 2 root www-data 4096 14. Mär 16:40 /var/lib/otrs/Config > > # ls -l /var/lib/otrs/Config > -rw-rw-r-- 1 www-data www-data 148355 14. Mär 16:40 ZZZAAuto.pm > -rw-rw-r-- 1 root www-data 335 10. Mär 10:34 ZZZAuto.pm > > With your patch, I can drive in the OTRS web interface SysConfig. > But I can not update the configuration. Here is the error message: > > Backend ERROR: OTRS-CGI-10 Perl: 5.10.1 OS: linux Time: Wed Mar 14 16:47:18 > 2012 > Message: Can't write ConfigItem! Traceback (28616): > Module: Kernel::Modules::AdminSysConfig::Run (v1.119) Line: 174 > Module: Kernel::System::Web::InterfaceAgent::Run (v1.64) Line: 868 > Module: > ModPerl::ROOT::ModPerl::Registry::usr_share_otrs_bin_cgi_2dbin_index_2epl::handler > (unknown version) Line: 46 > Module: (eval) (v1.90) Line: 204 > Module: ModPerl::RegistryCooker::run (v1.90) Line: 204 > Module: ModPerl::RegistryCooker::default_handler (v1.90) Line: 170 > Module: ModPerl::Registry::handler (v1.99) Line: 31 > > So I can write the configuration file… > > # chgrp www-data /usr/share/otrs/Kernel/Config/Files > # chmod 0775 /usr/share/otrs/Kernel/Config/Files > # ls -ld /usr/share/otrs/Kernel/Config/Files > drwxrwxr-x 2 root www-data 4096 14. Mär 16:39 > /usr/share/otrs/Kernel/Config/File > > The permissions look like this afterwards (symlink no longer exists): > > # ls -l /usr/share/otrs/Kernel/Config/Files/ZZZ* > lrwxrwxrwx 1 root root 32 14. Mär 16:34 > /usr/share/otrs/Kernel/Config/Files/ZZZAAuto.pm -> > /var/lib/otrs/Config/ZZZAAuto.pm > -rw-rw-r-- 1 www-data www-data 402 14. Mär 16:55 > /usr/share/otrs/Kernel/Config/Files/ZZZAuto.pm > > To make matters worse, the command 'dpkg-reconfigure otrs2', the permissions > for the directory /usr/share/otrs/Kernel/Config/Files resets. > > # ls -ld /usr/share/otrs/Kernel/Config/Files > drwxr-xr-x 2 root root 4096 14. Mär 16:55 /usr/share/otrs/Kernel/Config/Files
The problem is, that it is a security bug to make files under /usr writable, but okay now we know that the same has to be patched for ZZZAuto.pm, too. I will send you a refreshed one, soon -- /* Mit freundlichem Gruß / With kind regards, Patrick Matthäi GNU/Linux Debian Developer E-Mail: [email protected] [email protected] */
signature.asc
Description: OpenPGP digital signature
