User Tools

Site Tools


infrastructure:permissions-fix

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

infrastructure:permissions-fix [2026/08/22 06:45] – created - external edit 127.0.0.1infrastructure:permissions-fix [2026/08/22 11:30] (current) – external edit 127.0.0.1
Line 70: Line 70:
 | touchwell.co.uk | touch6410 | | touchwell.co.uk | touch6410 |
 | womenunlimited.africa | women7624 | | womenunlimited.africa | women7624 |
 +
 +## 2026-08-22 — Second regression: 23 sites ×596 root files (Gwen)
 +
 +**Trigger:** Daily permcheck cron flagged 23 sites with ~596 root-owned files each (~13,720 total).
 +
 +**Investigation:** Original fix had a shell-syntax bug — used `-user root -o -group root` without parentheses, so it matched files with **either** root user **or** root group, then chowned only the matched files. The `wp-includes/` core rsync from 2026-06-19 had files owned by root:root which matched correctly, but plugin/theme updates after the fix were sometimes creating files as root:www-data (group = root's group) which the buggy `find` then failed to chown.
 +
 +**Fix:** Created `/home/kaburu/wiki/scripts/permfix-once.sh` — uses `\( -user root -o -group root \)` (proper grouping), auto-detects site owner from `stat -c %U /home/<domain>/public_html`, excludes `wp-content/cache/*` and `wp-content/upgrade/*`. 23/23 sites → 0 root-owned files. Verified 4 sites can write to their own `public_html/` (touch+remove smoke test).
 +
 +**Sites fixed:** 24hrresponse.com, aberdeenrda.co.uk, bankhousecatering.co.uk, billing.myretonmarquees.co.uk, chippy.kaburu.co.uk, claybusters.scot, dm-ph.com, doctorfin.co.uk, friendscic.org, ggsgenerators.co.uk, jafricasafari.com, kaburu.co, kaburu.co.uk, l8waterhygiene.co.uk, longniddrybowlingclub.com, longniddrybowlingclub.co.uk, myretonmarquees.co.uk, pilates-edinburgh.co.uk, rainbowflavours.co.uk, rainbowvapes.co.uk, thechippyvan.co.uk, touchwell.co.uk, womenunlimited.africa.
  
infrastructure/permissions-fix.1787381124.txt.gz · Last modified: by 127.0.0.1

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki