behaviour change in download.kde.org - was - Re: KDE Frameworks 5.36.0

[Harald Sitter]

On Mon, Jul 10, 2017 at 11:17 PM, Albert Astals Cid <aacid at kde.org> wrote:
> El dilluns, 10 de juliol de 2017, a les 11:32:41 CEST, David Faure va
> escriure:
>> On vendredi 7 juillet 2017 15:51:41 CEST Maximiliano Curia wrote:
>> > ¡Hola David!
>> >
>> > El 2017-07-03 a las 02:18 +0200, David Faure escribió:
>> > > KDE Frameworks 5.36.0 has been uploaded to the usual place.
>> > >
>> > > New frameworks: none this time.
>> > >
>> > > Public release next Saturday.
>> > >
>> > > Thanks for the packaging work!
>> >
>> > Currently, 5.36 is listed in https://download.kde.org/stable/frameworks/
>> > but it gives 403 to try to access it. This is a bit of an annoyance for
>> > some of my scripts.
>> >
>> > If possible, could you please add the folder only when it's published?
>>
>> That folder is where the packagers get the tarballs from (using scp, not
>> public http), so I don't see how to do that.
>>
>> It's always been that way : for one week, the folder is there but without
>> permissions for the whole world just yet.
>>
>> (always = not just for KF5, but also for KDE SC releases, as far back as I
>> can remember)
>
> I'm 94.29% sure that previously stuff that was chmod 750 and belonging to
> ftpadmin:packager did not show in the http listing.

Seems most likely the directory wasn't actually 750.

Apache entirely holds on to view permission rather than read permission.

drwxr-x---  2 root    root    4096 Jul 11 09:33 750/
drwxr-x--x  2 root    root    4096 Jul 11 09:33 751/
drwxr-x-w-  2 root    root    4096 Jul 11 09:34 752/
drwxr-x-wx  2 root    root    4096 Jul 11 09:34 753/
drwxr-xr--  2 root    root    4096 Jul 11 09:34 754/
drwxr-xr-x  2 root    root    4096 Jul 11 09:34 755/

Being index by apache thusly

751/2017-07-11 09:33-
753/2017-07-11 09:34-
755/2017-07-11 09:34-

So, apache ignores all directories which aren't +x for apache's user.
Directories which are +x are listed but not necessarily readable (e.g.
751 results in HTTP 403 Forbidden).

TLDR: if the dir is -x it won't show up in the index, if it is +x it will.

HS