Bug 21704

Summary:	Installing Bugzilla causes the home directory to be taken over by owner root group apache
Product:	Mageia	Reporter:	Lewis Smith <lewyssmith>
Component:	RPM Packages	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED INVALID	QA Contact:
Severity:	normal
Priority:	Normal	CC:	davidwhodgins
Version:	6	Keywords:	feedback
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA5TOO
Source RPM:		CVE:
Status comment:

Description Lewis Smith 2017-09-13 22:15:15 CEST

Description of problem:
When installing/configuring Bugzilla, the home directory worked from has its ownership changed to:
 drwxr-x--- 35 root  apache  4096 Med  11 09:17 ./
See the end of the these comments:
 https://bugs.mageia.org/show_bug.cgi?id=21561#c26
 https://bugs.mageia.org/show_bug.cgi?id=16776#c14
Easily recoverable by (as root):
 # chown <user>:<user> /home/<user>

Version-Release number of selected component (if applicable):
 Both Mageia 5 and 6

Steps to Reproduce:
Fully install Bugzilla (as root), revert to the normal user, you are denied access to your home directory as noted above.

This will be tedious to test: if you already have bugzilla running, you do not want to disturb it. If not, it is a long process - to do twice! And Mageia 5 is nearly expired.

Lewis Smith 2017-09-13 22:16:14 CEST

Whiteboard: (none) => MGA5TOO

Comment 1 Dave Hodgins 2017-09-13 23:42:37 CEST

Sounds like using "su" to become root instead of "su -" (short for su -login).

If so, this is not a bug, but incorrect use of su.

CC: (none) => davidwhodgins
Keywords: (none) => feedback

Comment 2 Dave Hodgins 2017-09-14 00:18:24 CEST

Just tested installing and configuring bugzilla on Mageia 6 x86_64.

No changes to ownership in /home. Closing as invalid.

Resolution: (none) => INVALID
Status: NEW => RESOLVED

Comment 3 Lewis Smith 2017-09-14 20:41:21 CEST

(In reply to Dave Hodgins from comment #1)
> Sounds like using "su" to become root instead of "su -" (short for su
> -login).
> If so, this is not a bug, but incorrect use of su.
Just so. But I always do this, so doubt the designation 'incorrect'. Never mind,
happy to close the bug. The fewxer the better.