Re: [mod-security-users] @inspectFile script does not write to files

[Reindl H. <h.r...@th...>]

Am 04.10.18 um 18:45 schrieb Thorsten Kampe:
> * Christian Folini (Tue, 2 Oct 2018 20:26:53 +0200)
>> I can't confirm. I'm getting the tmp file as expected.
>>
>> Do you have permissions restricting the www-data user from writing to /tmp?
> 
> It was actually a permissions issue (kind of). Apache was obviosly 
> able to write to /tmp because that's were the scanned files were 
> temporarily stored.
> 
> I switched the log directory for my shell script from /tmp to 
> /var/log/apache2. This is where Apache writes its log files so I 
> could not expect any permission issues. Despite of that Apache's 
> error.log now showed permission errors. There were no error log 
> entries when I used /tmp.
> 
> I created a new directory and made www-data the owner. Now everything 
> works fine

the native httpd logs are opened at start as root
anything else runs by the user after drop privileges from the workers