[LAMP] set bitnami apache php process to run with umask 002

[tacoma50]

Describe your issue as much as you can

I created a Google VM by going to the Google Marketplace and creating a new BITNAMI PACKAGE FOR LAMP VM at: https://console.cloud.google.com/marketplace/product/bitnami-launchpad/lampstack

How do I configure the Bitnami apache and PHP processes to run with a umask of 002 so files are created with 0664 and folders with 0775.

[jotamartos]

You could change the start.sh scripts under /opt/bitnami/scripts/COMPONENT to set the umask before running the process or you can create a home folder for the daemon user and configure the profile.

https://serverfault.com/questions/166176/ways-to-set-umask-on-ubuntu-for-daemon-processes
https://unix.stackexchange.com/questions/703111/modify-umask-of-a-running-process

Please note that these questions are admin-related ones and it's out of the scope of this support forum. Please check the information available online to know how to set the umask of a running process.

[tacoma50]

Hi
Thank you. I tried your suggest as shown here but it did not work:

=== vi /opt/bitnami/scripts/apache-env.sh and added these 2 lines: ===

#- set umask of 002 so DIR=775 and FILES=664
umask 0002

=== restart server ===
/opt/bitnami/ctlscript.sh stop
/opt/bitnami/ctlscript.sh start

=== get httpd process ID ===
$ps -aef |grep httpd
5 S www-data 40685 40675 0 80 0 - 401375 pipe_r 17:51 ? 00:00:00 /opt/bitnami/apache/bin/httpd -f /opt/bitnami/apache/conf/httpd.conf

=== check the umask of a running proccess id ===========
root@test1:/data/etc/logs/test# grep -i umask /proc/40675/status
Umask: 0022

as you can see the umask is still 0022 and not 0002

=== I even adding this line to bitnami.apache.service did not work =======
vi /etc/systemd/system/bitnami.apache.service

[Service]
UMask=0002

[jotamartos]

Try editing the start.sh file under /opt/bitnami/scripts/apache and set the umask just before the apache command

[tacoma50]

Hmm I can't find a start.sh anywhere:

ls -al /opt/bitnami/scripts/apache
ls: cannot access '/opt/bitnami/scripts/apache': No such file or directory

find /opt/bitnami/ -type f -print |grep -i start
/opt/bitnami/scripts/prestart/00_update_motd_banner.sh
/opt/bitnami/scripts/prestart/00_resize_root_partition.sh
/opt/bitnami/scripts/firstboot/80_start_services.sh
/opt/bitnami/apache/bin/fcgistarter
/opt/bitnami/apache/manual/getting-started.html.ru.utf8
/opt/bitnami/apache/manual/programs/fcgistarter.html.tr.utf8
/opt/bitnami/apache/manual/programs/fcgistarter.html.en
/opt/bitnami/apache/manual/programs/fcgistarter.html
/opt/bitnami/apache/manual/programs/fcgistarter.html.fr.utf8
/opt/bitnami/apache/manual/getting-started.html.en
/opt/bitnami/apache/manual/getting-started.html
/opt/bitnami/apache/manual/getting-started.html.fr.utf8
/opt/bitnami/php/lib/php/test/XML_Util/tests/CreateStartElementTests.php
/opt/bitnami/phpmyadmin/vendor/twig/twig/src/Node/Expression/Binary/StartsWithBinary.php
/opt/bitnami/phpmyadmin/templates/table/start_and_number_of_rows_fieldset.twig

[jotamartos]

Sorry for the wrong info, I thought you were using a different asset.

=== I even adding this line to bitnami.apache.service did not work =======
vi /etc/systemd/system/bitnami.apache.service

[Service]
UMask=0002

I understand this file existed and you only edited it to add the UMask line, right?

https://unix.stackexchange.com/questions/367757/set-umask-for-systemd-unit

Please remember to reload the information before restarting the services. If that doesn't work, you can try setting the umask value in the /opt/bitnami/apache2/bin/envvars file

https://serverfault.com/questions/383734/how-do-i-set-default-umask-in-apache-on-debian

[tacoma50]

Hi,

I found the solution!! Your comment about: "remember to reload the information before restarting the services" made me think... I realized I was only restarting the bitnami services.

So what I did was edit /etc/systemd/system/bitnami.apache.service and add UMask=0002 in the [Service] section, and then reboot the whole server.

$ ps -aef |grep httpd
root 489 1 0 14:03 ? /opt/bitnami/apache/bin/httpd -f /opt/bitnami/apache/conf/httpd.conf
daemon 491 489 0 14:03 ? /opt/bitnami/apache/bin/httpd -f /opt/bitnami/apache/conf/httpd.conf

$ grep -i umask /proc/489/status
Umask: 0002

Thank you for your support!

[jotamartos]

I'm glad to hear that everything is working as expected now. However, just for future reference, it's not necessary to reboot the server, simply reload the systemd configuration

sudo systemctl daemon-reload

https://askubuntu.com/questions/1336532/what-is-the-difference-betweem-daemon-reload-and-reload

[github-actions]

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

[github-actions]

Due to the lack of activity in the last 5 days since it was marked as "stale", we proceed to close this Issue. Do not hesitate to reopen it later if necessary.