Filesystem attachment permissions

zellamsee

Greetings,

I have installed the filesystem attachment support and appear to be encountering permissions issues.

If I attempt to post an attachment using the user interface new ticket form, it will be successful about half the time and the other half will result in a File not found error being displayed when the user hits submit:

I have increasingly relaxed permissions on the directory where the files are uploaded. It now as a mode of 777 and I'm still getting this error. I also notice that the attachment directories are sometime being written as a different user/group than the web user/group (in this case it's www:www):

$ ls -la
total 32
drwxrwxrwx 7 www www 4096 Jul 3 18:50 .
drwxr-xr-x 21 root root 4096 Jul 3 13:43 ..
drwxr-x--x 2 www www 4096 Jul 3 16:07 _
-rwxrwxrwx 1 www www 30 Jul 3 13:44 .htaccess
drwxr-x--x 2 www www 4096 Jul 3 18:50 I
-rwxrwxrwx 1 www www 0 Jul 3 15:50 .keep
drwx------ 2 nobody nobody 4096 Jul 3 18:48 n
drwxr-x--x 2 www www 4096 Jul 3 16:01 p
drwxr-x--x 2 www www 4096 Jul 3 15:41 q

Any insight into what I've got wrong?

My settings:

Thank you!

KevinTheJedi

zellamsee

What version of osTicket and when did you download the plugin? Also, are these images/files added from fetched emails? If so ensure the user running cron is the web server user or PHP-FPM user.

Cheers.

zellamsee

Hello,

We're running osTicket version v1.18.1 (0375576) . The filesystem attachment plugin was downloaded last October.

Oddly enough, the attachments sent in via email are stored without any issue. (We're using email piping for incoming email, and the native PHP Mail function for sending outgoing email. We've no cron tabs running associated with osTicket.)

The issues we're seeing occur when the user submits a ticket with an attachment via the osTicket user portal.

Edited to add that the attachments saved from the email-based tickets are saved as user nobody. Can that be modified somewhere to the apache user of our choice? E.g., user/group www:www?

$ ll
total 12
drwxr-x--x 2 www www 4096 Jul 5 16:16 G
drwx------ 2 nobody nobody 4096 Jul 5 16:04 l
drwxr-x--x 2 www www 4096 Jul 5 16:14 W

KevinTheJedi

zellamsee

Of course, since you’re piping you’d need to adjust the user of the piping script.

Cheers.