{"action":"opened","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/17465","labels_url":"https://api.github.com/repos/owncloud/core/issues/17465/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/17465/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/17465/events","html_url":"https://github.com/owncloud/core/issues/17465","id":93679809,"number":17465,"title":"Upgrade from 8.0.4 to 8.1.0.8 produces erroneous \"/dev/urandom\" warning","user":{"login":"anonimal","id":12156341,"avatar_url":"https://avatars.githubusercontent.com/u/12156341?v=3","gravatar_id":"","url":"https://api.github.com/users/anonimal","html_url":"https://github.com/anonimal","followers_url":"https://api.github.com/users/anonimal/followers","following_url":"https://api.github.com/users/anonimal/following{/other_user}","gists_url":"https://api.github.com/users/anonimal/gists{/gist_id}","starred_url":"https://api.github.com/users/anonimal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anonimal/subscriptions","organizations_url":"https://api.github.com/users/anonimal/orgs","repos_url":"https://api.github.com/users/anonimal/repos","events_url":"https://api.github.com/users/anonimal/events{/privacy}","received_events_url":"https://api.github.com/users/anonimal/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-08T03:09:26Z","updated_at":"2015-07-08T03:09:26Z","closed_at":null,"body":"### Steps to reproduce\r\nUpgrade from 8.0.4 to 8.1.0.8 via the WebUI\r\n\r\n### Expected behaviour\r\nSmooth sailing.\r\n\r\n### Actual behaviour\r\nOn admin page, under \"Security & setup warnings\":\r\n\r\n\"/dev/urandom is not readable by PHP which is highly discouraged for security reasons. Further information can be found in our documentation.\"\r\n\r\n### Reality\r\n\r\n/dev/urandom IS readable by PHP, it is enabled in open_basedir, and a tweaked excerpt from settings/controller/checksetupcontroller.php proves that PHP has /dev/urandom access:\r\n\r\n$ vim test.php\r\n<?php\r\nif(@file_exists('/dev/urandom')) {\r\n  echo \"Exists\\n\";\r\n  $file = fopen('/dev/urandom', 'rb');\r\n  if($file) {\r\n    echo \"We can open\\n\";\r\n    fclose($file);\r\n    return true;\r\n  } else { echo \"We cannot open\\n\"; }\r\n} else { echo \"Does not exist\\n\"; }\r\n?>\r\n$ php test.php\r\nExists\r\nWe can open\r\n$\r\n\r\nPOSSIBLE IMPORTANT NOTE:\r\n\r\nI did NOT have /dev/urandom enabled in open_basdir before/during the upgrade. It was only AFTER the upgrade that I enabled /dev/urandom. Perhaps this warning is simply cached somewhere and it won't go away?\r\n\r\n### Server configuration\r\n**Operating system**:\r\nArch Linux, latest stable kernel\r\n**Web server:**\r\nApache 2.4.12-4\r\n**Database:**\r\nMariaDB 10.0.20\r\n**PHP version:**\r\nPHP 5.6.10\r\n**ownCloud version:** (see ownCloud admin page)\r\nownCloud 8.1.0 (git)\r\n**Updated from an older ownCloud or fresh install:**\r\nUpgrade from 8.0.4-2\r\n**List of activated apps:**\r\nDefault official\r\n```\r\nIf you have access to your command line run e.g.:\r\nsudo -u http php occ app:list\r\nfrom within your ownCloud installation folder\r\n```\r\nNo relevant errors.\r\n\r\n**The content of config/config.php:**\r\n\r\nA default, properly configured, config. Nothing of relevance.\r\n\r\n```\r\nIf you have access to your command line run e.g.:\r\nsudo -u http php occ config:list system --public\r\nfrom within your ownCloud installation folder\r\n```\r\nNo relevant errors.\r\n\r\n**Are you using external storage, if yes which one:** local/smb/sftp/...\r\nNo\r\n\r\n**Are you using encryption:** yes/no\r\nNo\r\n\r\n### Client configuration\r\nFirefox\r\n\r\n**Operating system:**\r\nLinux\r\n\r\n### Logs\r\n#### Web server error log\r\n```\r\n[authz_core:error] [pid 6023] [client 127.0.0.1:39940] AH01630: client denied by server configuration: /usr/share/webapps/owncloud/data/htaccesstest.txt\r\n```\r\n^ I imagine this has something to do with security checking and is not related to this issue\r\n\r\n#### ownCloud log (data/owncloud.log)\r\nNo relevant errors reported.\r\nAdding define( \"DEBUG\", 1); to config.php produces no errors.\r\n\r\n#### Browser log\r\nNo relevant errors reported.\r\n\r\n#### Actions\r\nMultiple logins/logouts, clearing of cache, restarting of httpd service, produces no different result."}}