On Sat, Jun 9, 2012 at 8:26 AM, Natxo Asenjo <[email protected]> wrote:
> On Sat, Jun 9, 2012 at 8:17 AM, Natxo Asenjo <[email protected]>wrote: > >> >> With FastCgiIpcDir *and* the dir with permissions 777, it works blocking >> some images: >> >> [Sat Jun 09 08:15:28 2012] [error] [client 192.168.0.160] FastCGI: >> invalid (dynamic) server "/opt/rt4/share/html/NoAuth/images/bpslogo.png": >> access for server (uid -1, gid -1) not allowed: execute not allowed, >> referer: http://rt.ipa.asenjo.nx/ >> [Sat Jun 09 08:15:28 2012] [error] [client 192.168.0.160] FastCGI: >> invalid (dynamic) server "/opt/rt4/share/html/NoAuth/images/bpslogo.png": >> access for server (uid -1, gid -1) not allowed: execute not allowed, >> referer: http://rt.ipa.asenjo.nx/ >> >> If the FastCgiIpcDir has perms 770 for apache:apache , it does not work. >> > > by the way, the permissions for those images are: > > ls -l /opt/rt4/share/html/NoAuth/images/ > total 40 > -rw-r--r--. 1 root bin 334 Jun 8 21:11 autohandler > -rw-r--r--. 1 root bin 3929 Jun 8 21:11 bpslogo.png > drwxr-xr-x. 2 root bin 4096 Jun 8 21:11 css > -rw-r--r--. 1 root bin 914 Jun 8 21:11 empty_star.gif > drwxr-xr-x. 2 root bin 4096 Jun 8 21:11 farbtastic > -rw-r--r--. 1 root bin 335 Jun 8 21:11 favicon.png > drwxr-xr-x. 2 root bin 4096 Jun 8 21:11 jquery_ui > -rw-r--r--. 1 root bin 161 Jun 8 21:11 star.gif > drwxr-xr-x. 2 root bin 4096 Jun 8 21:11 tablesorter > -rw-r--r--. 1 root bin 81 Jun 8 21:11 test.png > > So they are world readable and still being blocked. Perhaps they should be > owned by apache? > found it: http://requesttracker.wikia.com/wiki/ApacheConfig#How_to_avoid_processing_images_like_dynamic_content -- natxo
