"Writeable by group" exception for php scripts which are under git control

php git apache suexec
Lea Hayes picture Lea Hayes · Feb 6, 2014 · Viewed 7.7k times · Source

I am working on a website which is implemented using a number of PHP scripts. The entire website is a git repository which is running on a dedicated Apache server. The server will serve a website to the world but will not contain any reseller sub-accounts/reseller accounts.

After examining the error log I see the following:

SoftException in Application.cpp:256: File "/home/test/public_html/t.php" is writeable by group

It seems that the permission g+w is preventing PHP scripts from executing and simply throws a "500 Internal Server Error" page back to the web browser. Each time I pull from the git repository the scripts automatically acquire the permission g+x.

What should I do?

  1. Disable suEXEC? This doesn't seem to help.

  2. Is there a way to disable this "Writeable by group" requirement? would that even be sufficient?

  3. Somehow configure git to NOT add g+w permission?

  4. Something else?

Answer

hfmanson picture hfmanson · Dec 10, 2014

When running in CGI/FastCGI mode you should edit /etc/suphp/suphp.conf and change:

allow_file_group_writeable=true
allow_directory_group_writeable=true

Related questions

Generating SSH keys for 'apache' user

How do I add SSH keys for 'apache' user in Linux? BACKGROUND I am trying to add a service hook to github to notify a URL once I push to my repo. I have the following php page set up: &…

Read More
How can I have Github on my own server?

Is there anything out there like Github that is for your own local server? I am curious if there is like a PHP script or even a desktop client that mimics Github's functionality, I love Github but it would be …

Read More
How do I get Composer to download the latest commit in the master branch from GitHub for a package?

I am trying to get Composer do download the latest commit for the Behat/MinkSelenium2Driver package. That particular repo only has a master branch. I have tried every method I can think of, including deleting the files and letting …

Read More