[wplug] Apache configuration: ghost in the machine...

[Craig Gomulka]

Here's tail access_log
127.0.0.1 - - [25/Nov/2004:23:04:17 -0500] "GET /test.php HTTP/1.1" 403
404 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [25/Nov/2004:23:04:17 -0500] "GET /favicon.ico HTTP/1.1"
404 284 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:10:58:43 -0500] "GET /test.php HTTP/1.1" 403
404 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:10:58:43 -0500] "GET /favicon.ico HTTP/1.1"
404 284 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:10:59:25 -0500] "GET /test.php HTTP/1.1" 403
404 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:10:59:25 -0500] "GET /favicon.ico HTTP/1.1"
404 284 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:11:02:57 -0500] "GET /phpinf.php HTTP/1.1"
200 44440 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:11:02:57 -0500] "GET /phpinf.php?
=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2962
"http://localhost/phpinf.php" "Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.7.5) Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:11:02:57 -0500] "GET /phpinf.php?
=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 4440
"http://localhost/phpinf.php" "Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.7.5) Gecko/20041111 Firefox/1.0"
127.0.0.1 - - [26/Nov/2004:11:02:57 -0500] "GET /favicon.ico HTTP/1.1"
404 284 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0"


and here's the tail on error_log
[Thu Nov 25 23:03:53 2004] [error] [client 127.0.0.1] File does not
exist: /var/www/html/favicon.ico
[Thu Nov 25 23:04:14 2004] [error] [client 127.0.0.1] (13)Permission
denied: access to /test.php denied
[Thu Nov 25 23:04:15 2004] [error] [client 127.0.0.1] File does not
exist: /var/www/html/favicon.ico
[Thu Nov 25 23:04:17 2004] [error] [client 127.0.0.1] (13)Permission
denied: access to /test.php denied
[Thu Nov 25 23:04:17 2004] [error] [client 127.0.0.1] File does not
exist: /var/www/html/favicon.ico
[Fri Nov 26 10:58:43 2004] [error] [client 127.0.0.1] (13)Permission
denied: access to /test.php denied
[Fri Nov 26 10:58:43 2004] [error] [client 127.0.0.1] File does not
exist: /var/www/html/favicon.ico
[Fri Nov 26 10:59:25 2004] [error] [client 127.0.0.1] (13)Permission
denied: access to /test.php denied
[Fri Nov 26 10:59:25 2004] [error] [client 127.0.0.1] File does not
exist: /var/www/html/favicon.ico
[Fri Nov 26 11:02:57 2004] [error] [client 127.0.0.1] File does not
exist: /var/www/html/favicon.ico


On Fri, 2004-11-26 at 11:24 -0500, John Harrold wrote:
> Sometime in November Craig Gomulka assaulted the keyboard and produced:
> 
> | I have copied and/or created the files as root, the perms for the files
> | are 755 I chowned and chgrped them files to user: apache and group:
> | apache which is the user and group apache is running under. All of the
> | permissions for /var/www/html are 755. here's the listing of
> | the /var/www/html directory:
> | -rwxr-xr-x  1 apache apache 21 Nov 24 20:22 phpinf.php
> | -rwxr-xr-x  1 apache apache 21 Nov 25 23:04 test.php
> | 
> | as I mentioned before, phpinf.php loads, test.php is forbidden. How
> | stranged is that?
> 
> Is there something in /var/log/httpd/ corresponding to the actions you are
> performing?
> 
> _______________________________________________
> wplug mailing list
> wplug at wplug.org
> http://www.wplug.org/mailman/listinfo/wplug