suexec failed to setgid

zBrain · Apprentice Joined: 14 Apr 2006 Posts: 182

I can't figure this one out.

-The group exists

zBrain · Apprentice Joined: 14 Apr 2006 Posts: 182

So it turns out it had something to do with systemd. I had switched to it just to try it. Everything else seemed fine. Switching back to OpenRC fixed it.

Anybody have a guess why this might be?

Hu · Moderator Joined: 06 Mar 2007 Posts: 21607

What security features did systemd enable when it started apache? Did it set no-new-privs?

zBrain · Apprentice Joined: 14 Apr 2006 Posts: 182

How do I check?

Hu · Moderator Joined: 06 Mar 2007 Posts: 21607

grep NoNewPrivs /proc/pid-of-affected-process/status

zBrain · Apprentice Joined: 14 Apr 2006 Posts: 182

Necroing my own thread. I have come back to a situation where I need systemd and in searching this issue I found my own thread.

I also found this:
https://forums.gentoo.org/viewtopic-t-1089193-start-0.html

So, I can work around it.

I did file a bug https://bugs.gentoo.org/750470

Just posting this for future people who may search for this issue (which may be future me!)