Ticket #1080 (closed defect: fixed)

Opened 6 years ago

Last modified 5 years ago

regression: webmail creation broken

Reported by: anarcat Owned by: anarcat
Priority: block Milestone: alternc-0.9.9
Component: Bureau: domaines Version: alternc-0.9.7
Severity: crash Keywords:
Cc:

Description

when creating a webmail subdomain, we get the following error when accessing the domain from a webpage:

Warning: Unknown(): open_basedir restriction in effect. File(/var/alternc/bureau/admin/webmail/index.php) is not within the allowed path(s): (/var/alternc/html/l/librenux/:/usr/share/drupal/:/var/alternc/dns/redir:/usr/share/php/:/var/alternc/tmp:/tmp/) in Unknown on line 0
Warning: Unknown(/var/alternc/bureau/admin/webmail/index.php): failed to open stream: Operation not permitted in Unknown on line 0
Warning: (null)() [function.include]: Failed opening '/var/alternc/bureau/admin/webmail/index.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in Unknown on line 0

existing webmail domains work.

Change History

comment:1 Changed 6 years ago by anarcat

  • Owner changed from anonymous to anarcat
  • Status changed from new to assigned

This is a problem with basedir_prot.sh, that obviously puts a openbasedir protection when it shouldn't.

Probably around line 53:

53: if readlink "$i" | grep -q '/var/alternc/bureau/admin/webmail/*$'

54: readlink "$i" | grep -q '/var/alternc/bureau/*$'

comment:2 Changed 6 years ago by anarcat

  • Status changed from assigned to closed
  • Resolution set to fixed

(In [2050]) don't add the openbasedir protection on webmail. Closes: #1080

comment:3 Changed 5 years ago by anarcat

(In [2277]) fix webmail redirection by redirecting to  https://FQDN instead of the same domain

this is to encourage better security practices by forcing users to use HTTPS and a canonical URL.

eventually, this is a step towards getting rid of the global /webmail/ alias too.

See #170 See #101 See #1080

comment:4 Changed 5 years ago by anarcat

  • Milestone changed from alternc-0.9.8 to alternc-0.9.9
Note: See TracTickets for help on using tickets.