[php-maint] Bug#807164: php-common: permissions on /var/lib/php/sessions are bad

[Danyi Dávid]

Package: php-common
Version: 15
Severity: important

Dear Maintainer,

The folder permissions on /var/lib/php/sessions are bad, making the default
session path unusable, and php throwing critical errors.

The problem appears to be in the debian/rules script, first $PHP_COMMON is
undefined so
> override_dh_install:
>         mkdir -p debian/$(PHP_COMMON)/var/lib/php/sessions/
>         chmod 01733 debian/$(PHP_COMMON)/var/lib/php/sessions/
doesn't exactly do what its meant to do, but even if this gets fixed
dh_fixperms would change the permissions back to 755 with root:root ownership
at a later stage.

Adding the following block (or something similar) to the rules file would fix
that later issue:

> override_dh_fixperms:
>         dh_fixperms --exclude sessions


regards,
David



-- System Information:
Debian Release: stretch/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages php-common depends on:
ii  psmisc  22.21-2.1+b1
ii  sed     4.2.2-6.1

php-common recommends no packages.

php-common suggests no packages.

-- no debconf information