Uploads into CGI-BIN have incorrect permissions

[Mark Crisell]

The permissions of the CGI-BIN are set to 755.

However, any files uploaded to it are found to have a permission of 644. Thus my scripts won't run

I thought that uploads normally took on the permissions of the folder they were placed in?

:: Just read about something called SUEXEC? I get the impression this is something to do with a kinda virtual cgi-bin... which would make sense as I'm running this on a Verio VPS (Virtual Private Server) and have set this up asa virtual host. Also noticed this in the error log:

[Sun May 22 00:50:37 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
[Sun May 22 00:50:37 2005] [notice] Accept mutex: flock (Default: flock)

[Mark Crisell]

Having now manually set the files in the cgi-bin to 755, will this suffice, or will Actinic trip up in future, uploading new/updated scripts?

[I-CC]

Depending on how your server is configured, will depend on how the permissions and grants need to be assigned...

Generally, if your FTP server is set up to upload the files under the username assigned to the server, which we shall call 'smithy' and the user smithy is part of its own group on that server called smithygroup ( or you may just assign one group for all users on the server and give them all the smithygroup ).

Then, within your vhost file (httpd.conf for the domain in question) you would have an extry along the lines of:

SuexecUserGroup smithy smithygroup which equates to
SuexecUserGroup username group

If you change all of this type of stuff in the vhost file, then you need to ensure that your files in use now match, so go into the server under sshd and if we say your web folder is called /public_html, then directly before entering that folder issue the commands as follows:

chgrp -R smithygroup public_html
chown -R smithy public_html

Which, will then ensure that all files within and including the public_html folder is owned by the user smithy and the group of smithygroup.

Obviously, this all assumes that you are able to add your own users/groups and get this done securely, but this is what I would suggest is the issue.

[Mark Crisell]

Impressed

I've got to get the domain transfer in today, and as soon as it goes through I'll be uploading from fresh and I'll use this information. Thank you very much indeed.

Regards,
Mark.

[Mark Crisell]

Just to conclude this thread should anyone else ever come across this same problem, there is a small glitch in the "first upload" as Actinic kindly explained in their email:-

The permissions issue on the first upload is a known issue and a fix is being slotted for the next maintenance release.

You should not face a problem while doing a refresh or while uploading fresh scripts to the cgi-bin. As long as you do not manually delete all the files in the cgi-bin and then refresh you will not have any issues. It basically looks for existing files with permissions and copies the same permissions over to the new files.

NB: The version of the software I'm currently using is Developer 6.1.5