Bug 1386758

Summary:	RFE: please implement hook for core_map_to_storage() apache method
Product:	[Fedora] Fedora EPEL	Reporter:	Ondrej <ondrej.valousek>
Component:	httpd-itk	Assignee:	Pavel Alexeev <pahan>
Status:	CLOSED UPSTREAM	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	epel7	CC:	athmanem, ondrej.valousek, pahan
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-03-05 18:36:54 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Ondrej 2016-10-19 15:00:34 UTC

Description of problem:
ITK runs as root so when accessing storage mounted via NFS, one needs to define no_root_squash on NFS to make Apache happy when browsing filesystem.

This could be security problem so it would be nice if we could (optionally via some parameter, say) mask Apache internal function core_map_to_storage() method so that root access in not required on the remote storage.

Comment 1 Pavel Alexeev 2017-03-05 18:36:35 UTC

Hm it is good suggestion on first glance but I may only advise you talk with author of mpm-itk. Please go to http://mpm-itk.sesse.net/ and ask them in mail list.

Comment 2 Ondrej 2017-03-13 11:13:54 UTC

I have done that already - unfortunately the main developer does not seem to be very keen on doing that.
Ondrej