Executable bit stripped from /srv/http dir

[keithspg]

What could be causing the executable bit to be stripped from files in my web directory? I have a number of scripts which are executable. I've always run Arch for this project and naver had this problem. The last pacman -Syu was in April and everything worked as it always had with that, but after an update last week, now I get this issue and cannot seem to figure out what is doing it. I tried adding a /etc/tmpfiles.d config for this particular service which is a PHP script and that appeared to fix it, but, apparently not as it still does it every so often.

Any ideas? I am guessing it is systemd. Are there any recent developments which could cause this? The device is a RPi 3 running Arch Linux which was downloaded last week then upgraded via pacman after initial boot.

KeithSPG

[moonman]

They come like that from the package and PHP files don't need execute permission, as PHP interpreter will execute it.

[keithspg]

So this is PHP? I get that the *.php files do not need to be executable, but my *.sh scripts do (some PHP some bash which all start with a shebang and work properly). These scripts are the ones which keep getting changed.

[WarheadsSE]

Do me a favor, and check the files in `/usr/lib/tmpfiles.d`

$this->bbcode_second_pass_code('', '
$ tree /usr/lib/tmpfiles.d
/usr/lib/tmpfiles.d
├── arch.conf
├── cryptsetup.conf
├── dbus.conf
├── etc.conf
├── gvfsd-fuse-tmpfiles.conf
├── home.conf
├── journal-nocow.conf
├── legacy.conf
├── linux-firmware.conf
├── lxc.conf
├── man-db.conf
├── mkinitcpio.conf
├── portables.conf
├── rpcbind.conf
├── sddm.conf
├── sshd.conf
├── sudo.conf
├── systemd.conf
├── systemd-nologin.conf
├── systemd-nspawn.conf
├── tmp.conf
├── var.conf
')

`/usr/lib/tmpfiles.d` is owned by the filesystem package. Each file inside is owned by various installed packaged after it. Try `grep -Rn http /usr/lib/tmpfiles.d` to see if a package you have has started changing these permissions.

[keithspg]

Nothing in there seems to be owned by http... also looking at php-fpm and a couple others I see nothing that would deal with /srv/http/command or /var/www/command (where my scripts are).

root@alarm:~# tree /usr/lib/tmpfiles.d/
/usr/lib/tmpfiles.d/
├── arch.conf
├── bluealsa.conf
├── chrony.conf
├── cryptsetup.conf
├── dbus.conf
├── etc.conf
├── home.conf
├── journal-nocow.conf
├── legacy.conf
├── linux-firmware.conf
├── mkinitcpio.conf
├── mpd.conf
├── nscd.conf
├── php-fpm.conf
├── portables.conf
├── redis.conf
├── rpcbind.conf
├── sshd.conf
├── sudo.conf
├── systemd.conf
├── systemd-nologin.conf
├── systemd-nspawn.conf
├── tmp.conf
├── var.conf
└── x11.conf

0 directories, 25 files
root@alarm:~# grep -Rn http /usr/lib/tmpfiles.d\
root@alarm:~#

[WarheadsSE]

Alright, then describe to use the stack of packages you're using for PHP and web hosting, so we can attempt to narrow down where these behaviors might be coming from.

[keithspg]

@WarheadSE

Thanks for the help.

We are using nginx with php-fpm. The packages for PHP are libevent, phpiredis, pthreads and redis.

$this->bbcode_second_pass_code('', ' root@alarm:/etc/php/conf.d# ls
libevent.ini opcache.ini phpiredis.ini pthreads.ini redis.ini')

Do you want me to post all of the configuration files? Which ones are most interesting. These all worked before (april update) and this is a recent development after an upgrade.

[keithspg]

Could this be due to php 5.6.38? I compiled it from source.