On Mon, Mar 15, 1999, Bruno Treguier wrote:

> > Starting the httpd isn't working, it brings this in the error_log:
> > 
> > [error] mod_ssl: Child could not open SSLMutex lockfile /var/run/ssl_mutex.12155
> > (System error follows)
> > [error] System: Permission denied (errno: 13)
> > 
> > I've in httpd.conf:
> > SSLMutex  file:/var/run/ssl_mutex
> > 
> > ls -l /var/run/ssl_mutex.12155
> > -rw-------   1 root  root  0 Mar 15 15:45 /var/run/ssl_mutex.12155
> > 
> > Applying a chmod 666 /var/run/ssl_mutex.12155
> > helps...
> 
> I experienced a similar problem with the files logs/ssl_scache
> (.dir and .pag). It seems that those files are initially created
> with "root.root" ownership, and that Apache then tries to access
> them with the ownership set via the "User" and "Group" directives
> in httpd.conf. In my case it didn't prevent httpd from starting,
> but the error was logged, however.
> 
> What I did was just change the ownership of the files to match
> those of the "User" and "Group" directives in httpd.conf, and
> restart Apache...

Ok, but the question is why is the chown() not done!  The ssl_engine_scache.c
source also contains code for this:

|     /*
|      * we have to make sure the Apache child processes
|      * have access to the DBM file...
|      */
|     if (geteuid() == 0 /* is superuser */) {
|         chown(mc->szSessionCacheDataFile,
|               ap_user_id, -1 /* no gid change */);
|         chown(ap_pstrcat(p, mc->szSessionCacheDataFile,
|                          SSL_DBM_FILE_SUFFIX_DIR, NULL),
|               ap_user_id, -1 /* no gid change */);
|         chown(ap_pstrcat(p, mc->szSessionCacheDataFile,
|                          SSL_DBM_FILE_SUFFIX_PAG, NULL),
|               ap_user_id, -1 /* no gid change */);
|     }
                                       Ralf S. Engelschall
                                       [EMAIL PROTECTED]
                                       www.engelschall.com

______________________________________________________________________
Apache Interface to SSLeay (mod_ssl)   www.engelschall.com/sw/mod_ssl/
Official Support Mailing List               [EMAIL PROTECTED]
Automated List Manager                       [EMAIL PROTECTED]

Reply via email to