[Pkg-roundcube-maintainers] Bug#680917: roundcube-core: Symbolic link not allowed or link target not accessible: js/jquery-ui.min.js

[Teodor]

Package: roundcube
Version: 0.7.1-1~bpo60+1
Severity: normal

Hi,

I've noticed multiple lines in httpd's error.log like this:
| [Mon Jul 09 08:49:14 2012] [error] [client xyz] Symbolic link not allowed
|   or link target not accessible:
|   /var/lib/roundcube/plugins/jqueryui/js/jquery-ui.min.js, referer:
|   https://mail.DOMAIN/roundcube/?_task=mail&_mbox=INBOX&_refresh=1

After a short look I see several broken links in plugins/jqueryui directory:
| css -> ../../../javascript/jquery-ui/css
| js/i18n -> ../../../../javascript/jquery-ui/ui/i18n
| js/jquery-ui.min.js -> ../../../../javascript/jquery-ui/jquery-ui.min.js
| (config.inc.php too but shouldn't make a difference)

The reason for this broken links is that ../../../javascript get resolved
to /var/lib/javascript but the correct location is /usr/share/javascript.

Cheers

-- System Information:
Debian Release: 6.0.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages roundcube-core depends on:
ii  apache2                2.2.16-6+squeeze7 Apache HTTP Server metapackage
ii  apache2-mpm-prefork [h 2.2.16-6+squeeze7 Apache HTTP Server - traditional n
ii  dbconfig-common        1.8.46+squeeze.0  common framework for packaging dat
ii  debconf [debconf-2.0]  1.5.36.1          Debian configuration management sy
ii  libjs-jquery           1.6.4-1~bpo60+1   JavaScript library for dynamic web
ii  libjs-jquery-ui        1.8.dfsg-3        JavaScript UI library for dynamic 
ii  libmagic1              5.04-5+squeeze2   File type determination library us
ii  php-auth               1.6.2-1           PHP PEAR modules for creating an a
ii  php-mail-mime          1.8.0-2           PHP PEAR module for creating MIME 
ii  php-mdb2               2.5.0b2-1         PHP PEAR module to provide a commo
ii  php-net-smtp           1.4.2-3           PHP PEAR module implementing SMTP 
ii  php-net-socket         1.0.9-2           PHP PEAR Network Socket Interface 
ii  php5                   5.3.3-7+squeeze13 server-side, HTML-embedded scripti
ii  php5-gd                5.3.3-7+squeeze13 GD module for php5
ii  php5-intl              5.3.3-7+squeeze13 internationalisation module for ph
ii  php5-mcrypt            5.3.3-7+squeeze13 MCrypt module for php5
ii  php5-pspell            5.3.3-7+squeeze13 pspell module for php5
ii  roundcube-sqlite       0.7.1-1~bpo60+1   metapackage providing sqlite depen
ii  tinymce                3.3.8+dfsg0-0.1   platform independent web based Jav
ii  ucf                    3.0025+nmu1       Update Configuration File: preserv

roundcube-core recommends no packages.

Versions of packages roundcube-core suggests:
ii  php-auth-sasl            1.0.4-1         Abstraction of various SASL mechan
pn  php-crypt-gpg            <none>          (no description available)
ii  roundcube-plugins        0.7.1-1~bpo60+1 skinnable AJAX based webmail solut

roundcube depends on no packages.

-- Configuration Files:
/etc/logrotate.d/roundcube-core changed:
/var/log/roundcube/errors
/var/log/roundcube/sendmail
/var/log/roundcube/session
/var/log/roundcube/userlogins {
  create 640 www-data adm
  compress
  delaycompress
  missingok
  notifempty
  rotate 52
  weekly
}

/etc/roundcube/htaccess changed:
AddType text/x-component .htc
<IfModule mod_php5.c>
php_flag	display_errors	Off
php_flag	log_errors	On
php_value	upload_max_filesize	20M
php_value	post_max_size		6M
php_value	memory_limit		64M
php_flag	zlib.output_compression		Off
php_flag	magic_quotes_gpc		Off
php_flag	magic_quotes_runtime		Off
php_flag	zend.ze1_compatibility_mode	Off
php_flag 	suhosin.session.encrypt 	Off
php_flag	session.auto_start	Off
php_value	session.gc_maxlifetime	21600
php_value	session.gc_divisor	500
php_value	session.gc_probability	1
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^favicon.ico$ skins/default/images/favicon.ico
RewriteRule .svn/ - [F]
RewriteRule ^README|INSTALL|LICENSE|SQL|bin|CHANGELOG$ - [F]
</IfModule>
<IfModule mod_deflate.c>
SetOutputFilter DEFLATE
</IfModule>
<IfModule mod_headers.c>
</IfModule>
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault "access plus 1 month"
</IfModule>
FileETag MTime Size
<IfModule mod_autoindex.c>
Options -Indexes
</ifModule>


-- debconf information:
  roundcube/upgrade-error: abort
  roundcube/pgsql/authmethod-user: password
  roundcube/purge: false
* roundcube/dbconfig-install: true
* roundcube/language: en_US
* roundcube/db/dbname: roundcube
  roundcube/remote/newhost:
  roundcube/pgsql/changeconf: false
  roundcube/upgrade-backup: true
  roundcube/install-error: abort
  roundcube/mysql/admin-user: root
* roundcube/hosts:
  roundcube/pgsql/authmethod-admin: ident
  roundcube/dbconfig-remove:
  roundcube/pgsql/admin-user: postgres
  roundcube/internal/skip-preseed: false
  roundcube/db/app-user:
  roundcube/dbconfig-reinstall: false
  roundcube/mysql/method: unix socket
  roundcube/remove-error: abort
* roundcube/restart-webserver: false
* roundcube/dbconfig-upgrade: true
  roundcube/remote/port:
  roundcube/pgsql/method: unix socket
  roundcube/pgsql/manualconf:
* roundcube/db/basepath: /var/lib/dbconfig-common/sqlite/roundcube
  roundcube/pgsql/no-empty-passwords:
  roundcube/passwords-do-not-match:
  roundcube/internal/reconfiguring: false
* roundcube/reconfigure-webserver:
* roundcube/database-type: sqlite
  roundcube/remote/host:
  roundcube/missing-db-package-error: abort