Nginx + PHP-FPM: Permissions on UNIX socket

Steve steeeeeveee at gmx.net
Thu May 10 23:18:15 UTC 2012


-------- Original-Nachricht --------
> Datum: Thu, 10 May 2012 18:31:47 -0400
> Von: "B.R." <reallfqq-nginx at yahoo.fr>
> An: nginx at nginx.org
> Betreff: Re: Nginx + PHP-FPM: Permissions on UNIX socket

> Hi all again,
> 
> As my nginx package (gathered from the Debian Sqeeze repository @Nginx)
> specified, the maintainer should be "Sergey Budnevitch" <sb at nginx.com>.
> However, I got a mailer daemon saying the user doesn't exist...
> 
> How can I submit a bug to the Debian Squeeze Nginx package maintainer?
>
Maybe by using this URL -> http://www.debian.org/Bugs/


> ---
> *B. R.*
> 
> 
> On Wed, May 9, 2012 at 7:51 PM, B.R. <reallfqq-nginx at yahoo.fr> wrote:
> 
> > Well,
> >
> > Following the advice of a friend, I made the Nginx user owner of the
> > socket.
> > Guess what: it works!
> >
> > I restricted the chmod to 0600 to be sure the group was involved.
> >
> > Now here is some questions:
> > Why can't we use the group right on the socket?
> > Why is it the owner user who only has an impact on the effectiveness of
> > the rights?
> >
> > The group is useless here... I am a little lost following that logic.
> > ---
> > *B. R.*
> >
> >
> >
> > On Wed, May 9, 2012 at 7:12 PM, B.R. <reallfqq-nginx at yahoo.fr> wrote:
> >
> >> Hi,
> >>
> >> I still don't get it...
> >> I even tried to put the UNIX socket file inside a directory whose owner
> >> group was the 'www-data' one... Still 'Permission denied' in the Nginx
> log
> >> files!
> >>
> >> I reverted temporarily to the old way to bind Nginx with PHP-FPM, using
> >> the standard TCP listening and restricting it to the local interface
> >> through my firewall.
> >>
> >> If someone had an idea on this, I would be glad if he contributed!
> >> ---
> >> *B. R.*
> >>
> >>
> >>
> >> On Wed, May 9, 2012 at 1:43 PM, B.R. <reallfqq-nginx at yahoo.fr> wrote:
> >>
> >>> Hi Mark,
> >>>
> >>> Since I don't have ACL installed, here is the output of all others
> >>> commands:
> >>>
> >>> $ sudo service php5-fpm restart
> >>> Restarting PHP5 FastCGI Process Manager: php5-fpm.
> >>>
> >>>
> >>> $ date +%Y-%m-%d\ %H:%M:%S
> >>> 2012-05-09 19:39:30
> >>>
> >>>
> >>> $ ls -ald /var /var/run /var/run/php-fpm.sock
> >>> drwxr-xr-x 16 root     root     4096 21 nov.  17:10 /var
> >>> drwxr-xr-x  7 root     root     4096  9 mai   19:39 /var/run
> >>> srw-rw----  1 www-data www-data    0  9 mai   19:39
> /var/run/php-fpm.sock
> >>>
> >>> $ groups nginx
> >>> nginx : www-data debian-transmission
> >>>
> >>> $ groups www-data
> >>> www-data : www-data
> >>>
> >>>
> >>> $ ps aux | grep -F -e php -e nginx
> >>>  root     19448  0.0  0.0  30400  1164 ?        Ss   May08   0:00
> nginx:
> >>> master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
> >>> nginx    19449  0.0  0.0  30808  2104 ?        S    May08   0:00
> nginx:
> >>> worker process
> >>> root     30316  0.0  0.1 108440  4252 ?        Ss   19:39   0:00
> >>> php-fpm: master process (/etc/php5/fpm/php-fpm.conf)
> >>> www-data 30317  0.0  0.0 108440  3788 ?        S    19:39   0:00
> >>> php-fpm: pool www
> >>> www-data 30318  0.0  0.0 108440  3788 ?        S    19:39   0:00
> >>> php-fpm: pool www
> >>> (me)    30330  0.0  0.0   9616   832 pts/0    S+   19:39   0:00 grep
> -F
> >>> -e php -e nginx
> >>>
> >>> I still don't get the problem...
> >>> ---
> >>> *B. R.*
> >>>
> >>>
> >>>
> >>> On Wed, May 9, 2012 at 1:32 PM, W-Mark Kubacki
> <wmark+nginx at hurrikane.de
> >>> > wrote:
> >>>
> >>>> # (stop, then start php-fpm)
> >>>> # date +%Y-%m-%d\ %H:%M:%S
> >>>> # ls -ald /var /var/run /var/run/php-fpm.sock
> >>>> # getfacl /var/run/php-fpm.sock
> >>>> # groups nginx
> >>>> # groups www-data
> >>>> # ps aux | grep -F -e php -e nginx
> >>>>
> >>>
> >>>
> >>
> >

-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de



More information about the nginx mailing list