Worker permissions about gearmanmanager HOT 8 CLOSED

Also, if I manually run the code as:

sudo -u gearman php test.php

It works correctly.

from gearmanmanager.

Having the same issue here. Working on a controlled test case...

from gearmanmanager.

What OS and file system is this? That is kind of outside the scope of the PHP code.

from gearmanmanager.

RHEL 6.3, ext4, PHP 5.3.13

I'm working around the issue on my end by passing --user to the daemon call in the init script instead of -u to gearman-manager.

When I let gearman_manager set its own user id via posix_setuid(), workers seem not to be able to write to files that should be writable via group permissions.

I don't think this is so much a gearman-manager issue as a problem with PHP and/or the platform.

from gearmanmanager.

PHP's posix_setuid function looks like a straight passthru to setuid() so nothing strange going on there that I can see. Perhaps it's just posix -- does the phrase "shall not affect the supplementary group list" at http://pubs.opengroup.org/onlinepubs/009695399/functions/setuid.html explain this?

from gearmanmanager.

Smarter colleagues of mine agree that when you execute setuid you lose any groups other than your primary group. So there you have it.

from gearmanmanager.

Ah, that would explain why I have not seen this issue. If I remember, long ago, I was broken of using secondary groups by something on Linux and since have never even bothered using them.

So, sounds like maybe a comment is in order for this to be more clear in the docs? Thoughts?

from gearmanmanager.

It is an edge case--should every program that uses setuid have a comment about supplementary group permissions? On the other hand, it took us some hours to figure out what the problem was.

Apparently more of us need to be wary of secondary groups.

from gearmanmanager.