FS#51636 - [dokuwiki] package should probably not automatically install dokuwiki.ini for php

Attached to Project: Community Packages
Opened by Michael Taboada (lilmike) - Wednesday, 02 November 2016, 09:05 GMT
Last edited by Sergej Pupykin (sergej) - Wednesday, 21 June 2017, 11:24 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sergej Pupykin (sergej)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
In the current package, a .ini file is installed to /etc/php/conf.d/dokuwiki.ini to allow dokuwiki directories through the open-basedir setting. However, on my system, I have open basedir entirely commented out, as I don't wish to use it (as I have so many possible locations for my website php code). When this was installed, this automatically turned back on open basedir, causing all of my websites *except* dokuwiki to not function, and I didn't realize it until a few days later because all I had been working with was dokuwiki itself. I would suggest that either 1. don't install this file, or 2. At least give a big, prominent warning for those who are not using open basedir that they should go and comment out the setting in /etc/php/conf.d/dokuwiki.ini or their websites will stop functioning.


Additional info:
* package version(s) 20160626_a-1
This task depends upon

Closed by  Sergej Pupykin (sergej)
Wednesday, 21 June 2017, 11:24 GMT
Reason for closing:  Fixed
Comment by Michael Taboada (lilmike) - Wednesday, 02 November 2016, 09:06 GMT
Well, now that I submit it I realize this is php, not php-fpm, ah well. I can't change the title though.
Comment by Doug Newgard (Scimmia) - Wednesday, 02 November 2016, 15:25 GMT
openbasedir is no longer the default in Arch. This changed back in January(1), this package should definitely not be re-enabling it by default.

(1) https://www.archlinux.org/news/php-70-packages-released/
Comment by Sébastien Luttringer (seblu) - Saturday, 19 November 2016, 03:25 GMT
Doing this without any warning in pacman log is not fair. It just breaks dokuwiki with default arch config after update. Having a message to announce this on purpose breakage would have been nice.
Comment by Doug Newgard (Scimmia) - Saturday, 19 November 2016, 06:18 GMT
seblu, how does it break docuwiki?
Comment by Sébastien Luttringer (seblu) - Monday, 21 November 2016, 16:26 GMT
I guess it's the reverse of the situation of Micheal.
As this package used to set open_basedir, I had to configure open_basedir for others webapps to work. As soon, as you retire this file, you should either remove all your usage of open_basedir or set it manually for dokuwiki.

@sergej: you didn't have to adjust that on your server?
Comment by Doug Newgard (Scimmia) - Monday, 21 November 2016, 16:35 GMT
So we're not talking default configs. That makes more sense.
Comment by Sergej Pupykin (sergej) - Monday, 21 November 2016, 16:43 GMT
I use dokuwiki 20160626_a-2 on armv7 and I did not change anything on upgrade.
Comment by Sébastien Luttringer (seblu) - Monday, 21 November 2016, 16:46 GMT
you're correct, that's not about default config for a fresh install, it's about the upgrade process and put a message when we know that we'll break something.
Comment by Sébastien Luttringer (seblu) - Monday, 21 November 2016, 16:48 GMT
sergej, have you only dokuwiki on this host?
Comment by Sergej Pupykin (sergej) - Monday, 21 November 2016, 16:54 GMT
It also runs owncloud, cgit, and roundcubemail.
Comment by Sergej Pupykin (sergej) - Wednesday, 21 June 2017, 11:23 GMT
I guess everbody already removed openbasedir, so I close it.

Loading...