For performance reasons I choose tmpfs as the filesystem of choice for /tmp and for security reasons I always make sure that /tmp has a noexec flag attached to it. I’ve been admining webservers for 10 years now and by far the single greatest system wide breach of security happens with a script being placed in /tmp and being executed. 8 times out of 10 I would say. So of course we can make sure that /tmp doesnt’ allow anything to be executed from inside of it however when it comes time to use apt-get and a program needs to be preconfigured you are going to run into a little problem, that being that nothing works and the program won’t install, spewing out the following:
Preconfiguring packages …
Can’t exec “/tmp/ssl-cert.config.16841″: Permission denied at /usr/share/perl/5.10/IPC/Open3.pm line 168.
open2: exec of /tmp/ssl-cert.config.16841 configure failed at /usr/share/perl5/Debconf/ConfModule.pm line 59
ssl-cert failed to preconfigure, with exit status 255
dpkg: unrecoverable fatal error, aborting:
syntax error: unknown group ‘Debian-exim’ in statoverride file
E: Sub-process /usr/bin/dpkg returned an error code (2)
So to get around that the boys over at Debian-Administration we’re kind enough to post the following solution:
Add the following to the file /etc/apt/apt.conf:
DPkg::Pre-Invoke{"mount -o remount,exec /tmp";}; DPkg::Post-Invoke {"mount -o remount /tmp";};This contains two lines, one running before any packing installation and one afterwards. They merely execute the commands required to add and remove the execute permissions on the /tmp
Alright, what is this, day 10 since I started up the Drupal install, although really only day 5 since I’ve gotten serious with this beast. The love affair has certainly been rocky but there might be an end in sight. Today is the first day that I’ve gotten enough of the underlying systems in place that I am able to actually use one of them to help manage my team. That’s right, I’ve officially crossed the line from setting up drupal 100% to using it. It’s about a 80/20 split now between setup and usage, but still a start!
Alright, the nightmare of getting a fully integrated Wiki into Drupal is finally over. Hopefully some lucky soul finds this and saves themselves the literal days I spent getting this up and running. At the end of my last post I mentioned a few links and articles here and there and I’m happy to report that none of them did the trick. That being said I think it is still a good idea to go through them and even follow the instructions, whether or not they work, so that you can learn from them. They teach a lot of stuff relating to input types that is crucial for using Drupal and will be crucial if you want to successfully implement a Wiki system.

