Page 1 of 1

[SOLVED] User to run the server part

Published: February 14, 2023 - 11:01 AM
by flipflip
Hello everyone,

While browsing through the directories of my Wapt server, I noticed something surprising. The owner and the owning group are not root or Wapt, but "1000:philippe" (Philippe has GID 1000).
/opt/wapt# ll
total 8648
-rw-r--r-- 1 1000 philippe 5930 Jan 25 19:00 auth_module_ad.py
drwxr-xr-x 3 root root 4096 Feb 14 10:55 bin
drwxr-xr-x 2 root root 4096 Nov 7 15:34 cache
-rw-r--r-- 1 1000 philippe 401518 Feb 3 15:45 common.py
drwxr-x--- 2 wapt www-data 4096 Feb 14 10:55 conf
drwxr-xr-x 2 root root 4096 Sep 28 16:00 conf.d
drwxr-xr-x 2 wapt root 4096 Feb 14 10:56 db
drwxr-xr-x 8 root root 4096 Feb 14 10:55 include
drwxr-xr-x 2 root root 4096 Sep 28 16:00 keys
drwxr-xr-x 6 1000 philippe 4096 Feb 14 10:55 lib
-rw-r--r-- 1 1000 philippe 7641 Jan 25 19:00 licencing.py
drwxr-xr-x 2 root root 4096 Nov 7 15:34 log
drwx------ 2 root root 4096 Jan 11 08:55 private
drwxr-xr-x 2 root root 4096 Feb 14 10:55 __pycache__
-rwxr-xr-x 1 1000 philippe 909 Jan 25 19:00 runwaptserver.sh
-rwxr-xr-x 1 1000 philippe 1603 Jan 25 19:00 runwaptservice.sh
-rwxr-xr-x 1 1000 philippe 909 Jan 25 19:00 runwapttasks.sh
-rw-r--r-- 1 1000 philippe 7061 Jan 25 19:00 setupdevhelpers.py
-rw-r--r-- 1 1000 philippe 15966 Feb 13 14:20 setuphelpers_linux.py
-rw-r--r-- 1 1000 philippe 23301 Jan 25 19:00 setuphelpers_macos.py
-rw-r--r-- 1 1000 philippe 27547 Feb 13 14:20 setuphelpers.py
-rw-r--r-- 1 1000 philippe 15715 Jan 25 19:00 setuphelpers_unix.py
drwxr-xr-x 3 root root 4096 Oct 21 12:36 ssl
drwxr-xr-x 6 root root 4096 Feb 14 10:55 templates
-rw-r--r-- 1 1000 philippe 20 Feb 13 14:20 version-full
drwxr-xr-x 3 root root 4096 Feb 14 10:55 wads
-rw-r--r-- 1 1000 philippe 4607 Feb 13 14:20 waptbinaries.sha256
-rw-r--r-- 1 1000 philippe 109374 Feb 13 14:20 waptcrypto.py
-rwxr-xr-x 1 1000 philippe 6357600 Feb 13 14:20 wapt-get.bin
-rw-r--r-- 1 root root 8 Nov 7 15:34 wapt-get.ini
-rw-r--r-- 1 1000 philippe 88383 Feb 13 14:20 wapt-get.py
-rwxr-xr-x 1 1000 philippe 999 Jan 25 19:00 wapt-get.sh
-rw-r--r-- 1 1000 philippe 188351 Feb 13 14:20 waptpackage.py
-rwxr-xr-x 1 1000 philippe 940 Jan 25 19:00 waptpython.sh
-rw-r--r-- 1 1000 philippe 4150 Jan 25 19:00 wapt-scanpackages.py
-rwxr-xr-x 1 1000 philippe 960 Jan 25 19:00 wapt-scanpackages.sh
drwxr-xr-x 9 root root 4096 Feb 14 10:55 waptserver
drwxr-xr-x 9 root root 4096 Feb 14 10:55 waptservice
-rw-r--r-- 1 1000 philippe 8889 Jan 25 19:00 wapt-signpackages.py
-rwxr-xr-x 1 1000 philippe 961 Jan 25 19:00 wapt-signpackages.sh
-rwxr-xr-x 1 1000 philippe 1340200 Feb 13 14:20 wapttftpserver.bin
-rw-r--r-- 1 1000 philippe 110882 Feb 13 14:20 waptutils.py
I'm moving up from a /opt/wapt directory:
drwxr-xr-x 19 wapt www-data 4096 Feb 13 11:49 wapt
wapt id
uid=107(wapt) gid=33(www-data) groups=33(www-data)
The server is running on Debian 11.6, which was just updated, along with the wapt packages. During the initial installation, I was using wapt version 2.2.

Re: User to run the server part

Published: February 14, 2023 - 2:28 PM
by dcardon
Hello flipflip,

Thank you very much for this feedback. There was a recent change to our build farm, and the buildbot:buildbot account (1000:1000) is still holding the file permissions for the package (which should have been root:root). It's not ideal, but it shouldn't impact production. We'll fix this very quickly. In the meantime, you can make the following changes:

Code: Select all

find /opt/wapt -group 1000 -exec chgrp  root {}  \;
find /opt/wapt -user 1000 -exec chown  root {}  \;
Sorry for the inconvenience.

Sincerely,

Denis

Re: User to run the server part

Published: February 14, 2023 - 4:53 PM
by flipflip
Okay, I applied the change and restarted the wapt* service on the server.

So far, so good... Everything seems fine.

Thank you.

Re: [SOLVED] User to run the server part

Published: February 15, 2023 - 9:20 AM
by dcardon
Hi again Flipflip,

the latest nightly build pushed online should fix the problem and will be included in the next release. Thanks again for the bug report.

Best regards,

Denis