How do I resolve an issue of permissions in apache. The initial task that I am trying to get working is to upload a mura plugin the the temp directory of ColdFusion9. However, I have since discovered that this issue isn't a ColdFusion issue.
ColdFusion is running as the apache user:
# ps aux | grep coldfusion apache 31016 0.0 0.0 2104 664 ? S Oct27 0:00 /opt/coldfusion9 ... apache 31017 0.7 24.5 933260 513976 ? Sl Oct27 18:02 /opt/coldfusion9 ... Apache has access to the directory that I'm attempting to write to:
# namei -m /opt/coldfusion9/runtime/servers/coldfusion/SERVER-INF/temp/wwwroot-tmp/ f: /opt/coldfusion9/runtime/servers/coldfusion/SERVER-INF/temp/wwwroot-tmp/ drwxr-xr-x / drwxr-xr-x opt drwxrwxrwx coldfusion9 drwxrwxr-x runtime drwxrwxr-x servers drwxr-xr-x coldfusion drwxr-xr-x SERVER-INF drwxr-xr-x temp drwxr-xr-x wwwroot-tmp # ls -la /opt/coldfusion9/runtime/servers/coldfusion/SERVER-INF/temp/wwwroot-tmp/ total 8 drwxr-xr-x 2 apache apache 4096 Oct 28 15:46 . drwxr-xr-x 3 apache root 4096 Oct 27 21:33 .. There are no extended attributes assigned to the directory:
#lsattr /opt/coldfusion9/runtime/servers/coldfusion/SERVER-INF/temp/wwwroot-tmp/ ------------- /opt/coldfusion9/runtime/servers/coldfusion/SERVER-INF/temp/wwwroot-tmp/afile I changed the shell (temporarily) of the apache user to bash, logged into the shell and was able to write to the directory.
Selinux is disabled.
fixweb has been run.
I created two scripts, tmp.cfm and tmp.php, which simply attempted to write a file in the target directory, browsed to the tmp scripts in the browser and both were unable to write to the directory.
I also created an alias to the directory in apache:
Alias /atemp /target-dir <Location /atemp> Order allow,deny Allow from all </Location> Restarted apache and was still unable to get access to this directory.
I've seen a similar permission issue when working with Wordpress.
I suspect that this is something to do with my apache binary but I haven't heard back from the providers of that binary, so I was hoping to get some assistance from a larger audience.
Edit: I'd be open to other possible problems that would cause this that I haven't considered.
