Who knew, well I suppose it is in a manual somewhere.<\/p>\n
Took me a while to figure out what this was. I have Apache rewite rules that run a bash script from \/cgi-bin\/ and write to a file in \/var\/tmp. A also have a PHP webpage that reads the file in \/var\/tmp, unfortunately under the F20 release of systemd \/var\/tmp is a movable location when it is accessed from under Apache.<\/p>\n Knowing the file name I did a search for it. And found it in unexpected locations, for example<\/p>\n Now thats obviously by design.<\/p>\n The file is supposed to be appended to, but it looks like when httpd is restarted by systemd writes\/reads to \/var\/tmp go to a dynamically remapped folder so I am ending up with multiple files in random locations that are being appended to.<\/p>\n An example of the PHP code that reads the file and the bash code that writes the file is below<\/p>\n So how to get the damn scripts writing\/reading where they should ?. And that fixes it for httpd\/apache anyway.<\/p>\n However using private temp directories does seem like a good idea from a security perspective, thats why they were introduced in the first place. So I will try to find time to rewrite all my scripts to store semi-permanent data somewhere else… outside the webserver directories as external scripts that use the file have no need to traverse the webserver directories, so I guess more pain with SELinux lies ahead.<\/p>\n","protected":false},"excerpt":{"rendered":" Who knew, well I suppose it is in a manual somewhere. Took me a while to figure out what this was. The answer was at http:\/\/stackoverflow.com\/questions\/12206857\/php-cant-read-file-on-var-tmp I have Apache rewite rules that run a bash script from \/cgi-bin\/ and write … Continue reading
\nThe answer was at http:\/\/stackoverflow.com\/questions\/12206857\/php-cant-read-file-on-var-tmp<\/a><\/p>\n\/var\/tmp\/systemd-httpd.service-XQe2EnM\/tmp\/blacklist.log\r\n\/var\/tmp\/systemd-httpd.service-XBx5E16\/tmp\/blacklist.log<\/pre>\n
\r\n\/* PHP that reads the file *\/\r\n$filename = \"\/var\/tmp\/blacklist.log\";\r\n$databuf = \"\";\r\nif (file_exists($filename)) {\r\n if (is_readable($filename)) {\r\n if ($databuf = file_get_contents( $filename )) {\r\n echo \"<pre>$databuf<\/pre>\";\r\n }\r\n }\r\n}\r\n\r\n# bash script code that appends to the file\r\nLOGFILE=\"\/var\/tmp\/blacklist.log\"\r\necho \"Message I want logged\" >> ${LOGFILE}\r\n<\/pre>\n
\nAs mentioned in the post I linked to above it is to do with systemd private temp directories.<\/p>\nvi \/usr\/lib\/systemd\/system\/httpd.service\r\nchange 'PrivateTmp=true' to 'PrivateTmp=false'\r\nsystemctl daemon-reload\r\nsystemctl restart httpd.service<\/pre>\n