Re: disable httpd ap_directory_walk() before mpm_itk transfer

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

On Fri, Mar 31, 2023 at 8:18 AM Stefan Helmert <s.helmert@xxxxxxx> wrote:
>
> in my setup, httpd runs on a specific uid and delegates transfers to
> mpm_itk with AssignUserIDExpr %{reqenv:MAPPED_USER} dynamic uid.
>
> The problem is: httpd runs ap_directory_walk() with its own uid before
> delegating to mpm_itk with the dynamic uid. This fails, because httpd
> doesn't have the permissions to read the directory.
>
> How can I disable ap_directory_walk() or delegate it to mpm_itk?

I can't think of a configuration that could change this behaviour, but
if you can patch mpm_itk I'd suggest to try to make the
itk_post_perdir_config hook an itk_map_to_storage hook instead
(APR_HOOK_REALLY_FIRST still, but returning DECLINED on success so
that the next map_to_storage hooks run too).

That's from a quick look at mpm_itk code (and I know very little about
this MPM), but it looks like it could work..

Regards;
Yann.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx





[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux