[Typo3-linux] Problems with ImageMagick 5.5.7

[Michael Stucki]

Hello Franz,

> safe_mode_gid = On
> 
> leads to
> 
> Warning: fopen(): SAFE MODE Restriction in effect. The script whose
> uid/gid is 10001/10001 is not allowed to access
> /home/httpd/vhosts/fholzinger.com/httpdocs/typo3temp/llxml/misc.xml_7c18212dec.default.iso-8859-1.cache
> owned by uid/gid 30/8 in
> /home/httpd/vhosts/fholzinger.com/httpdocs/typo3_src-3.8.0/t3lib/class.t3lib_div.php
> on line 2117

Fine. So let's have a look at this:
Your TYPO3 source files (e.g. class.t3lib.div) was uploaded by yourself and
therefore belongs to 10001/10001 (which your user and your group (see
passwd and group files).

>  ls -l
> /home/httpd/vhosts/fholzinger.com/httpdocs/typo3_src-3.8.0/t3lib/class.t3lib_div.php
> -rw-r--r--  1 franzhol psacln 143189 May 23 02:41
> /home/httpd/vhosts/fholzinger.com/httpdocs/typo3_src-3.8.0/t3lib/class.t3lib_div.php

This proves my guess was right.

> ls -l
> /home/httpd/vhosts/fholzinger.com/httpdocs/typo3temp/llxml/misc.xml_7c18212dec.default.iso-8859-1.cache
> -rwxrwxr-x  1 wwwrun www 2038 Sep 20 10:45
> /home/httpd/vhosts/fholzinger.com/httpdocs/typo3temp/llxml/misc.xml_7c18212dec.default.iso-8859-1.cache

Ah. The files which are created by PHP (or more exactly: the webserver
process) belong to wwwrun:www.

Now have a look at how safe_mode and safe_mode_gid work. Obviously this
whole subject has nothing to do with ImageMagick anymore.

PHP checks the user/group ID of your TYPO3 scripts but creates files with a
different permission.

There are several workarounds for this problem.
I suggest you do it that way:
- Keep safe_mode_gid set
- Change the group owner of your TYPO3 source to www

> So maybe I have to make wwwrun:www the owner of the ImageMagick files.

As long as safe_mode_gid is set, only the group must match with the the
group owner of your TYPO3 source (which is what is actually being run).

Hope this helps.

Regards, michael
-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/