[MacPorts] #68532: Since Monterey there is additional security for UserDir enabled by default and it's not documented (was: Since Monterrey there is additional security for UserDir enabled by default and it's not documented)

MacPorts noreply at macports.org
Mon Oct 23 00:48:15 UTC 2023


#68532: Since Monterey there is additional security for UserDir enabled by default
and it's not documented
--------------------------+--------------------
  Reporter:  Behinder     |      Owner:  (none)
      Type:  enhancement  |     Status:  new
  Priority:  Normal       |  Milestone:
 Component:  wiki         |    Version:  2.8.1
Resolution:               |   Keywords:
      Port:  apache2      |
--------------------------+--------------------
Changes (by ryandesign):

 * keywords:  apache, web server =>
 * type:  request => enhancement
 * component:  ports => wiki


Old description:

> I spent week trying to figure it out as this is not documented on
> https://trac.macports.org/wiki/Apache2.4.x
> Example file https-userdir.conf will not work because for God only knows
> reason Apple disabled access to user home directory for other
> directories.
> Therefore to make things work you should do in terminal
>
> {{{
> chmod +a "_www allow execute" ~
> }}}
>
> I don't know what this command is equivalent for - probably it is
> shorthand for adding user home directory to the group _www and then
> adding +x (for user? group? others?) just for this user, instead of doing
> chmod o+x ~ which would be risky.
>
> Anyway this should be documented somewhere on each system >=Monterrey.
> Apple is really annoying I wish I could go back to Mojave.

New description:

 I spent week trying to figure it out as this is not documented on
 wiki:Apache2.4.x
 Example file https-userdir.conf will not work because for God only knows
 reason Apple disabled access to user home directory for other directories.
 Therefore to make things work you should do in terminal

 {{{
 chmod +a "_www allow execute" ~
 }}}

 I don't know what this command is equivalent for - probably it is
 shorthand for adding user home directory to the group _www and then adding
 +x (for user? group? others?) just for this user, instead of doing chmod
 o+x ~ which would be risky.

 Anyway this should be documented somewhere on each system >=Monterey.
 Apple is really annoying I wish I could go back to Mojave.

--

Comment:

 Anyone can edit the wiki.

-- 
Ticket URL: <https://trac.macports.org/ticket/68532#comment:1>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list