On Sun, Apr 20, 2025 at 10:37:54PM +0100, Ximin Luo wrote: > Package: lighttpd-mod-webdav > Version: 1.4.79-1 > Severity: important > > Dear Maintainer, > > PUT on a webdav share gives HTTP 500 since 1.4.79-1. > > I have rebuilt 1.4.77-1 from source and verified the problem does not exist > there.
lighttpd 1.4.79 added hardening to systemd lighttpd.service. https://git.lighttpd.net/lighttpd/lighttpd1.4/src/branch/master/doc/systemd/lighttpd.service One of the changes in lighttpd.service adds ProtectHome=read-only To where are you trying to PUT files using lighttpd mod_webdav? Is it to someplace underneath a home directory? If so, you may install lighttpd-mod-webdav with lighttpd 1.4.79 and create a systemd override to the lighttpd.service. To create an override, `systemctl edit lighttpd` and edit /etc/systemd/system/lighttpd.service.d/override.conf to add ProtectHome=no If the above does not solve your issue, please try overriding the systemd hardening additions (or comment them out in /usr/lib/systemd/system/lighttpd.service and `systemcl daemon-reload`) one by one to identify the ones which affect your config. Then, please post the results in your lighttpd.conf (with private information xxxx-d out) `lighttpd -f /etc/lighttpd/lighttpd.conf -p` Cheers, Glenn
