[Freedombox-discuss] Mediawiki - no access rights for images

Joseph Nuthalapati njoseph at thoughtworks.com
Fri Aug 10 07:46:36 BST 2018 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dietmar,

Your wiki is really impressive. Now that I see it in context, I
can appreciate how important images are for this wiki instance.

It is a really good showcase of how MediaWiki on FreedomBox can
be used. I have shared it on social media as well.

Artists, writers and early adopters play an important role in
increasing the adoption of products. Mastodon is a good example
of this. Thanks for your contribution to FreedomBox. :-)

permondes - sagen <sagen at permondes.de> wrote:
> Thanks Joseph, that did it. You can see it by yourself:
> https://permond es.de/mediawiki/index.php/Basteln So I am one
> of the first to use mediawiki with uploads? Debugging is the
> fate of the early adopters. :-)
> 	Dietmar
> Am Donnerstag, den 09.08.2018, 16:04 +0000 schrieb Joseph
> Nuthalapati:
> > Dietmar,
> > 
> > Thanks for reporting this issue. I've just raised a merge request
> > on Debian Salsa with the fix [1]. It should be automatically
> > applied when your FreedomBox upgrades to version 0.36.0.
> > 
> > I've added an additional Apache configuration file called
> > mediawiki-freedombox.conf in the last release. It has the
> > following lines in it.
> > 
> > <Directory /var/lib/mediawiki/>
> >     <IfModule mod_rewrite.c>
> >         RewriteEngine On
> >         RewriteRule ^/index.php/(.*)$ /$1 [R,L]
> >         RewriteCond %{REQUEST_FILENAME} !-f
> >         RewriteCond %{REQUEST_FILENAME} !-d
> >         RewriteRule ^(.*)$ index.php [L]
> >     </IfModule>
> > </Directory>
> > 
> > This file overrides Debian's MediaWiki configuration in
> > mediawiki.conf. You can find both of these files in the directory
> > /etc/apache2/conf-available on your FreedomBox.
> > 
> > The fix is to append the following configuration to the file
> > mediawiki-freedombox.conf
> > 
> > <Directory /var/lib/mediawiki/images>
> >     <IfModule mod_rewrite.c>
> >         RewriteEngine Off
> >     </IfModule>
> > </Directory>
> > 
> > <Directory /var/lib/mediawiki/uploads>
> >     <IfModule mod_rewrite.c>
> >         RewriteEngine Off
> >     </IfModule>
> > </Directory>
> > 
> > I have attached the file to this email so that you can directly
> > scp it into your FreedomBox and copy it to
> > /etc/apache2/conf-available. The next upgrade of FreedomBox will
> > be shipped with the same file, so the upgrade should be smooth.
> > 
> > After copying the file, you can issue the command "systemctl
> > reload apache2" through an ssh session to your FreedomBox.
> > Another approach is to enable and disable MediaWiki from the
> > FreedomBox web UI, which will have the same effect.
> > 
> > P.S. Enabling file uploads was implemented in Plinth 0.35.0, but
> > we didn't add a functional test for it. I've rectified the
> > mistake this time so that we can immediately catch it if this
> > feature ever breaks.
> > 
> > 
> > 1.
> > https://salsa.debian.org/freedombox-team/plinth/merge_requests/1307
> > 
> > 
> > permondes - sagen <sagen at permondes.de> wrote:
> > > Changing the subject of the mail as I think this is an access
> > > right issue introduced by Plinth 0.35. Read access to the
> > > mediawiki should be available for anyone. Even logged in to
> > > mediawiki the images are not visible.Checking some directories:
> > > > @freedombox:/var/lib/mediawiki$ ls -al 
> > > > ...
> > > > drwx------ 1 www-data www-data 106 Jul 22 17:06 images
> > > 
> > > Is it correct that the owner of the images folder is
> > > "www-data"? And only the owner has access, not the group, nor
> > > anyone else? For the individual images rights are:
> > > > @freedombox:/var/lib/mediawiki$ sudo ls -al images/0/01
> > > > insgesamt 36
> > > > drwxr-xr-x 1 www-data www-data    44 Jun 21 20:58 .
> > > > drwxr-xr-x 1 www-data www-data     8 Aug  2 21:07 ..
> > > > -rw-r--r-- 1 www-data www-data 32863 Jun 21 20:58
> > > > Fadenbild_genagelt.jpg
> > > 
> > > which looks okay.
> > > Checking
> > > https://www.mediawiki.org/wiki/Manual:Configuring_file_uploads
> > > :
> > > > Check directory security...
> > > > Set the /images folder (or the /uploads folder in previous
> > > > versions)
> > > > to have permission "755":
> > > > 
> > > > 
> > > > 
> > > > User can read, write and execute;Group can read and execute;
> > > > World can read and execute.
> > > 
> > > So the rights of the 'images' folder are set wrong, am I right?
> > > Should it be drwxr-xr-x?Was there an change on this in Plinth
> > > 0.35?Is it save for me to try this change? Thanks for your help
> > > Dietmar
> > > 
> > > Am Dienstag, den 07.08.2018, 21:24 +0200 schrieb permondes -
> > > sagen:
> > > > I just observe that all images in my Mediawiki are gone or cannot
> > > > be
> > > > displayed any more. I am not sure since when this is, I just
> > > > found
> > > > that imagemagick was updated 4 days ago:
> > > > 
> > > > ' 2018-08-03 06:26:18,634 INFO Packages that will be upgraded:
> > > > bsdutils fdisk imagemagick imagemagick-6-common imagemagick-6.q16
> > > > libblkid1 libfdisk1 libimage-magick-perl libimage-magick-q16-perl
> > > > libmagickcore-6.q16-6 libmagickcore-6.q16-6-extra libmagickwand-
> > > > 6.q16-6 libmount1 libsmartcols1 libsocket6-perl libuuid1 login
> > > > mount
> > > > passwd python-cryptography python3-cryptography rfkill util-
> > > > linux-- 
> > > > 
> > > > Mediainformation in Firefox gives an image size of 0px x 0px or
> > > > type
> > > > text (no wonder). 
> > > > Checking all files (see https://permondes.de/mediawiki/Spezial:Da
> > > > teie
> > > > n ) I get the error message
> > > > > You don't have permission to access
> > > > > /mediawiki/images/5/59/Tor_-
> > > > > _klein.JPG
> > > > > on this server.
> > > > 
> > > > So, some change of permissions? Maybe with the last Plinth?
> > > > 
> > > > Here is how ugly the wiki looks like now: https://permondes.de/me
> > > > diaw
> > > > iki/index.php/Basteln
> > > > 
> > > > 	Dietmar
> > > > 
> > > > FreedomBox: https://permondes.de
> > > > _______________________________________________
> > > > Freedombox-discuss mailing list
> > > > Freedombox-discuss at alioth-lists.debian.net
> > > > https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedomb
> > > > ox-d
> > > > iscuss_______________________________________________
> > > 
> > > Freedombox-discuss mailing list
> > > Freedombox-discuss at alioth-lists.debian.net
> > > https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox
> > > -discuss

- -- 
- -- 
Regards
Joseph Nuthalapati

-----BEGIN PGP SIGNATURE-----
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=wCZm
-----END PGP SIGNATURE-----

More information about the Freedombox-discuss mailing list