Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Apache private systemd /tmp in Ubuntu 18.04 #316

Open
jeroen opened this issue Aug 17, 2018 · 2 comments
Open

Apache private systemd /tmp in Ubuntu 18.04 #316

jeroen opened this issue Aug 17, 2018 · 2 comments

Comments

@jeroen
Copy link
Member

jeroen commented Aug 17, 2018

In Ubuntu 18.04, apache www-data has a virtual /tmp directory which cannot be seen by other users. Therefore we cannot rename an installed directory into /usr/local/lib/opencpu/apps.

It may also affect other things:

cleanup cron script

I think that it needs to use as user www-data to work. Make sure to disable the workaround when testing.

apparmor rules

Still seem to work fine as far as I can see

@jeroen
Copy link
Member Author

jeroen commented Aug 17, 2018

As explained here: https://www.philipp-wagner.com/blog/2014/04/does-tmp-have-a-split-personality

jeroen@dev:~$ systemctl show apache2 | grep PrivateTmp
PrivateTmp=yes

The workaround (in that post) to disable PrivateTmp seems to work, however it is hacky. Better would be to create the temporary dir inside the public file system namespace to begin with.

jeroen added a commit that referenced this issue Aug 18, 2018
@jeroen
Copy link
Member Author

jeroen commented Aug 18, 2018

Adding cleanup script with JoinsNamespaceOf=apache2.service: opencpu/opencpu-server@2f1d49b

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant