Forum

Hi Hugo

I have used default file configurations with only a change in hiawatha.conf file:
ServerRoot = /hiawchroot
After that I have make hierarchy directory and executables with 'newroot /usr/local/bin/hiawatha', make directory /hiawchroot/var/{lib,www,log} with perms 755
and I have tried to exec hiawatha in chroot directory /hiawchroot (with perms: drwxrwxrwx. 5 root root 100 10 ott 20.02 hiawchroot and selinux disabled) I have received these warnings:



[root@testpc hiawchroot]# /usr/local/sbin/hiawatha -d
Warning: couldn't create logfile /hiawchroot/var/log/hiawatha/system.log
Warning: couldn't create logfile /hiawchroot/var/log/hiawatha/exploit.log
Warning: couldn't create logfile /hiawchroot/var/log/hiawatha/access.log
Warning: couldn't create logfile /hiawchroot/var/log/hiawatha/error.log
Press Ctrl-C to shutdown the Hiawatha webserver.

Hiawatha was compiled with configure options: ./configure --sysconfdir=/etc --mandir=/usr/share/man --localstatedir=/var --enable-chroot

Is there something that I wrong?

Thanks


Hiawatha version: 7.7
Operating System: Linux Fedora 15

Does the directory /hiawchroot/var/log/hiawatha/ exist?

Yes.

I have create it with command: mkdir /hiawchroot/var/{lib,www,log}

That command doesn't create the last subdirectory with the name 'hiawatha'. Take a closer look at the error message what directory is needed to store the logfiles.

Sorry but I forgot to write in the topic that the directory was created.
I have directory /hiawchroot/var/log/hiawatha but problem remains.

Try changing the block code in hiawatha.c at line 2032 from

#ifdef HAVE_CHROOT
    touch_logfiles(config, config->server_root);
#else
    touch_logfiles(config, "");
#endif

to

touch_logfiles(config, "");

Thank you.

I have tested it with basic configuration and work fine

But now... it tell me Forbidden for all cgi files.
I have inserted cgi-wrapper in sbin directory with suid permission.
I have tried also with printenv.cgi but same result.
Line like this example in cgi-wrapper.conf is rigth?
Wrap = chroot : /mnt/tests/hiawchroot | /var/www/user ; 1090:1090

What does the error logfile or system logfile say?

127.0.0.1|Fri 14 Oct 2011 16:48:54 +0200|403|548||GET /printenv.cgi HTTP/1.0|Host: 127.0.0.2|Accept: text/html, text/plain, text/css, text/sgml, */*;q=0.01|Accept-Encoding: gzip, bzip2|Accept-Language: en|Pragma: no-cache|Cache-Control: no-cache|User-Agent: Lynx/2.8.7rel.1 libwww-FM/2.14 SSL-MM/1.4.1 OpenSSL/1.0.0e-fips|Referer: https://127.0.0.2:8443/printenv.cgi

Is not problem of path or permissions because it work fine when run from any user via bash.

Is ExecuteCGI set to 'yes'?

Yes and same configuration work fine without chroot.