[Pkg-roundcube-maintainers] Bug#767248: roundcube-core: upgrade sets permissions of debian-db.php to root:root

[Dominik George]

Package: roundcube
Version: 0.9.5+dfsg1-4.1
Severity: grave
Justification: renders package unusable

The recent upgrade of the package broke roundcube with a permission
problem upon reading its configuration. The file
/etc/roundcube/debian-db.php was identified as being the culprit.

This file is generated by dbconfig-common and should be owned by
root:www-data with permissions 0640. After the upgrade, however, it was
owned by root:root with permissions 0640 (reproducible on two systems),
making it unreadable by the webserver.

I got the idea that it might be related to #720517 somehow…

As a workaround, this solves the issue:

# chown :www-data /etc/roundcube/debian-db.php


Credits to Simon Bruder <simon.bruder at teckids.org>, our 10 year-old
infrastructure admin, for stumbling upon this in a dist-upgrade,
identifying the origin of the failure in the server logs and helping
find out it is dbconfig-common related by reading the postinst script
;). You rock, fellow ☺!

Cheers,
Nik

-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages roundcube-core depends on:
ii  dbconfig-common        1.8.47+nmu2
ii  debconf [debconf-2.0]  1.5.53
ii  libapache2-mod-php5    5.6.2+dfsg-1
ii  libjs-jquery           1.7.2+dfsg-3.2
ii  libmagic1              1:5.19-2
ii  php-auth               1.6.4-1
ii  php-mail-mime          1.8.9-1
ii  php-net-smtp           1.6.2-2
ii  php-net-socket         1.0.14-1
ii  php5                   5.6.2+dfsg-1
ii  php5-common            5.6.2+dfsg-1
ii  php5-intl              5.6.2+dfsg-1
ii  php5-json              1.3.6-1
ii  php5-mcrypt            5.6.2+dfsg-1
ii  roundcube-sqlite3      0.9.5+dfsg1-4.1
ii  tinymce                3.4.8+dfsg0-1
ii  ucf                    3.0030

Versions of packages roundcube-core recommends:
ii  apache2 [httpd-cgi]              2.4.10-5
ii  apache2-mpm-prefork [httpd-cgi]  2.4.10-5
ii  apache2-mpm-worker [httpd-cgi]   2.4.10-5
ii  php5-gd                          5.6.2+dfsg-1
ii  php5-pspell                      5.6.2+dfsg-1

Versions of packages roundcube-core suggests:
ii  php-auth-sasl      1.0.6-1
pn  php-crypt-gpg      <none>
ii  roundcube-plugins  0.9.5+dfsg1-4.1

roundcube depends on no packages.

-- Configuration Files:
/etc/roundcube/apache.conf changed [not included]

-- debconf information:
  roundcube/internal/reconfiguring: false
  roundcube/remote/newhost:
  roundcube/reconfigure-webserver: apache2, lighttpd
  roundcube/mysql/admin-user: root
  roundcube/db/app-user:
* roundcube/database-type: sqlite3
  roundcube/db/basepath: /var/lib/dbconfig-common/sqlite3/roundcube
  roundcube/dbconfig-reinstall: false
  roundcube/pgsql/changeconf: false
  roundcube/pgsql/no-empty-passwords:
  roundcube/mysql/method: unix socket
  roundcube/pgsql/authmethod-admin: ident
  roundcube/remote/host:
  roundcube/pgsql/authmethod-user: password
  roundcube/dbconfig-upgrade: true
  roundcube/db/dbname: roundcube
  roundcube/pgsql/method: unix socket
  roundcube/missing-db-package-error: abort
  roundcube/upgrade-backup: true
  roundcube/purge: false
  roundcube/hosts:
  roundcube/language: de_DE
  roundcube/passwords-do-not-match:
  roundcube/pgsql/admin-user: postgres
  roundcube/remove-error: abort
  roundcube/internal/skip-preseed: false
* roundcube/dbconfig-install: true
  roundcube/pgsql/manualconf:
  roundcube/install-error: abort
  roundcube/upgrade-error: abort
  roundcube/remote/port:
  roundcube/restart-webserver: true
  roundcube/dbconfig-remove: