#17466 [Com]: Safe mode uid -1 bug

ID: 17466 Comment by: romio@aduva.com Reported By: cjones@dualboot.net Status: Closed Bug Type: Apache2 related Operating System: Linux 2.4.7-10 PHP Version: 4.2.1 New Comment: I have the same problem with safe mode "uid -1" in apache 1.3.27 php 4.2.3 on Redhat 7.1 Previous Comments: ------------------------------------------------------------------------ [2002-09-23 13:56:34] iliaa@php.net This bug has been fixed in CVS. In case this was a PHP problem, snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. In case this was a documentation problem, the fix will show up soon at http://www.php.net/manual/. In case this was a PHP.net website problem, the change will show up on the PHP.net site and on the mirror sites in short time. Thank you for the report, and for helping us make PHP better. ------------------------------------------------------------------------ [2002-09-16 10:30:27] derick@php.net Must be fixed before 4.3.0 ------------------------------------------------------------------------ [2002-08-29 15:09:31] slamb@slamb.org See <http://bugs.php.net/bug.php?id=17858> - patch available at <http://www.slamb.org/php-apache2-safemode.patch>. ------------------------------------------------------------------------ [2002-08-23 16:40:46] shollatz@d.umn.edu While this may have been assigned as an Apache 2.x problem, I observe safe_mode_gid not working for most GIDs, works for a few, regardless whether the user's GID set includes it. The environment is Apache 1.3.26 with PHP 4.2.2 as a module, under Solaris 2.8. ------------------------------------------------------------------------ [2002-06-20 15:14:06] brian@brian-web.com That patch I just posted is broken with Apache 2.0.39, apparently the finfo struct isn't filled in 2.0.39 at the point that I was accessing it. (Its all 0s). If you move the call to php_apr_finfo2stat to php_apache_get_stat it works, but then its runs everytime php_apache_get_stat is called, which I was trying to avoid. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/17466 -- Edit this bug report at http://bugs.php.net/?id=17466&edit=1