[pkg-lighttpd] Bug#401691: fails to start because of new /var/log/lighttpd/* permissions

[Mark van Eijk]

Package: lighttpd
Version: 1.4.13-5
Severity: normal


In response to bug #398834, the following was added to
lighttpd.postinst:

chmod 0770 -R /var/log/lighttpd
chmod 0660 /var/log/lighttpd/*

First of all, there is no need for /var/log/lighttpd and its contents to
be group-writable (and it didn't use to be before this version of the
package).

But this is not the problem.

In my lighttpd setup with virtual hosts, my virtual host logs are in
/var/log/lighttpd/<site name>/ (which is not very uncommon).

Because of the chmod statements above, my directories have the following
permissions:
drw-rw----

And the files in the subdirectories:
-rwxrwx---

Now lighttpd doesn't start anymore. Since the contents of the
directories are not accessible for www-data anymore, lighttpd cannot
access the log files for the virtual hosts, disables the logging plugin
and quits.

On most servers, I run my lighttpd under runit. Since lighttpd keeps
crashing, runit keeps trying to start it. 
On some of my servers (those with Ruby on Rails projects), because of
this bug, it keeps starting the Ruby on Rails projects every time it
tries to start lighttpd (without killing the old ones first). On one
server this has led to continuous swapping of memory and finally the
use of the reset button was necessary to manually fix the lighttpd
problem.

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-1-686
Locale: LANG=C, LC_CTYPE=nl_NL at euro (charmap=ISO-8859-15)

Versions of packages lighttpd depends on:
ii  libattr1                     2.4.32-1    Extended attribute shared library
ii  libbz2-1.0                   1.0.3-6     high-quality block-sorting file co
ii  libc6                        2.3.6.ds1-8 GNU C Library: Shared libraries
ii  libldap2                     2.1.30-13.2 OpenLDAP libraries
ii  libpcre3                     6.7-1       Perl 5 Compatible Regular Expressi
ii  libssl0.9.8                  0.9.8c-4    SSL shared libraries
ii  lsb-base                     3.1-22      Linux Standard Base 3.1 init scrip
ii  mime-support                 3.37-1      MIME files 'mime.types' & 'mailcap
ii  perl                         5.8.8-6.1   Larry Wall's Practical Extraction 
ii  zlib1g                       1:1.2.3-13  compression library - runtime

Versions of packages lighttpd recommends:
ii  php4-cgi                      6:4.4.4-8  server-side, HTML-embedded scripti

-- no debconf information