Ticket #1080 (closed defect: fixed)
regression: webmail creation broken
| Reported by: | anarcat | Owned by: | anarcat |
|---|---|---|---|
| Priority: | block | Milestone: | alternc-0.9.9 |
| Component: | Bureau: domaines | Version: | alternc-0.9.7 |
| Severity: | crash | Keywords: | |
| Cc: |
Description
when creating a webmail subdomain, we get the following error when accessing the domain from a webpage:
Warning: Unknown(): open_basedir restriction in effect. File(/var/alternc/bureau/admin/webmail/index.php) is not within the allowed path(s): (/var/alternc/html/l/librenux/:/usr/share/drupal/:/var/alternc/dns/redir:/usr/share/php/:/var/alternc/tmp:/tmp/) in Unknown on line 0 Warning: Unknown(/var/alternc/bureau/admin/webmail/index.php): failed to open stream: Operation not permitted in Unknown on line 0 Warning: (null)() [function.include]: Failed opening '/var/alternc/bureau/admin/webmail/index.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in Unknown on line 0
existing webmail domains work.
Change History
comment:1 Changed 6 years ago by anarcat
- Owner changed from anonymous to anarcat
- Status changed from new to assigned
comment:2 Changed 6 years ago by anarcat
- Status changed from assigned to closed
- Resolution set to fixed
comment:3 Changed 5 years ago by anarcat
(In [2277]) fix webmail redirection by redirecting to https://FQDN instead of the same domain
this is to encourage better security practices by forcing users to use HTTPS and a canonical URL.
eventually, this is a step towards getting rid of the global /webmail/ alias too.
Note: See
TracTickets for help on using
tickets.

This is a problem with basedir_prot.sh, that obviously puts a openbasedir protection when it shouldn't.
Probably around line 53:
54: readlink "$i" | grep -q '/var/alternc/bureau/*$'