Gmail Calendar Documents Reader Web more »
Recently Visited Groups | Help | Sign in
Google Groups Home
Serious Privileges Problem: Please Help
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  10 messages - Collapse all  -  Translate all to Translated (View all originals)
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Followup To:
Add Cc | Add Followup-to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers you hear
 
Rami Chowdhury  
View profile  
 More options Nov 8, 8:09 am
Newsgroups: comp.lang.python
From: Rami Chowdhury <rami.chowdh...@gmail.com>
Date: Sat, 7 Nov 2009 13:09:39 -0800
Local: Sun, Nov 8 2009 8:09 am
Subject: Re: Serious Privileges Problem: Please Help
On Saturday 07 November 2009 06:13:11 Victor Subervi wrote:

Can we see the output of 'ls -lZ' and 'fixfiles check' on those directories,
and see what the Apache (httpd.conf or .htaccess) configuration is for them?

----
Rami Chowdhury
"Passion is inversely proportional to the amount of real information
available." -- Benford's Law of Controversy
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Rami Chowdhury  
View profile  
 More options Nov 8, 9:49 am
Newsgroups: comp.lang.python
From: Rami Chowdhury <rami.chowdh...@gmail.com>
Date: Sat, 7 Nov 2009 14:49:28 -0800
Local: Sun, Nov 8 2009 9:49 am
Subject: Re: Serious Privileges Problem: Please Help

On Saturday 07 November 2009 13:51:06 Victor Subervi wrote:

> httpd.conf:

> <VirtualHost *:80>
> ServerAdmin m...@creative.vi
> DocumentRoot /var/www/html/angrynates.com
> ServerName angrynates.com
> Options +ExecCGI -IncludesNoExec
> <Directory /var/www/html/angrynates.com/global_solutions/*>

You may want to change this to:
        <Directory /var/www/html/angrynates.com/global_solutions>

If you want regular expression syntax, I would advise using the syntax
        <Directory ~ EXPRESSION>
or
        <DirectoryMatch ~ EXPRESSION>

> #ls -lZ
> drwxr-xr-x  root root                                  1024
> drwxr-xr-x  root root                                  1132
> drwxr-xr-x  root root                                  1255

[snip]

It looks like you don't have *any* SELinux context information; if SELinux is
on, this will cause problems. Try using the 'restorecon' command to put the
defaults in place, and consider using 'chcon' to change the security context
to an appropriate one (I believe you want something like
'unconfined_u:object_r:httpd_sys_content_t' for Apache content).

> On Sat, Nov 7, 2009 at 4:09 PM, Rami Chowdhury

<rami.chowdh...@gmail.com>wrote:

----
Rami Chowdhury
"Strangers are just friends who haven't had enough gin." -- Howdle's Saying
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)

    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Rami Chowdhury  
View profile  
 More options Nov 8, 9:49 pm
Newsgroups: comp.lang.python
From: Rami Chowdhury <rami.chowdh...@gmail.com>
Date: Sun, 8 Nov 2009 02:49:54 -0800
Local: Sun, Nov 8 2009 9:49 pm
Subject: Re: Serious Privileges Problem: Please Help
On Saturday 07 November 2009 23:59:23 Victor Subervi wrote:

> restorecon didn't change ls -lZ output

Did the suggested changes to the Apache configuration help at all?

> Can you give me the exact command for chcon? It complains there are too few
> arguments, and I couldn't figure it out.

For chcon, you probably want the 'unconfined_u' user setting, the 'object_r'
role setting, and the 'httpd_sys_content_t' type setting. As 'chcon --help'
tells us, you need to call it as follows:

chcon [OPTION]... [-u USER] [-r ROLE] [-l RANGE] [-t TYPE] FILE...

Of course, here FILE can also be a directory, or the root of a directory tree,
and the -R option will make chcon run recursively.

> Does this really matter? I moved the selinux folder and its contents as
>  well as sent an "echo 0>..." command to kill it.

I'm not certain -- have you tried confirming through programs such as system-
config-securitylevel that it's off?

>  Furthermore,
> [root@13gems global_solutions]# ps wax|grep selinux
> 17645 pts/0    S+     0:00 grep selinux

SELinux is a kernel subsystem -- it won't show up in the process list.

> Please advise.
> V

> On Sat, Nov 7, 2009 at 5:49 PM, Rami Chowdhury

<rami.chowdh...@gmail.com>wrote:

----
Rami Chowdhury
"A man with a watch knows what time it is. A man with two watches is never
sure". -- Segal's Law
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)

    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Rami Chowdhury  
View profile  
 More options Nov 9, 4:28 am
Newsgroups: comp.lang.python
From: Rami Chowdhury <rami.chowdh...@gmail.com>
Date: Sun, 8 Nov 2009 09:28:41 -0800
Local: Mon, Nov 9 2009 4:28 am
Subject: Re: Serious Privileges Problem: Please Help
On Sunday 08 November 2009 05:44:31 Victor Subervi wrote:

> [root@13gems angrynates.com]# chcon -u unconfined_u -r object_r -t
> httpd_sys_content_t global_solutions
> chcon: can't apply partial context to unlabeled file global_solutions
> Please advise.

Try 'chcon -R -h unconfined_u:object_r:httpd_sys_content_t
global_solutions/*', which should specify the whole context at once and avoid
that error, as well as apply it recursively to all files and subdirectories.

Also, to narrow down the error, can you let us have the output of:
        tail /var/log/messages
        tail /var/log/httpd/error_log

HTH,
Rami

----
Rami Chowdhury
"As an online discussion grows longer, the probability of a comparison
involving Nazis or Hitler approaches one." -- Godwin's Law
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Simon Forman  
View profile  
 More options Nov 10, 4:55 am
Newsgroups: comp.lang.python
From: Simon Forman <sajmik...@gmail.com>
Date: Mon, 9 Nov 2009 12:55:42 -0500
Local: Tues, Nov 10 2009 4:55 am
Subject: Re: Serious Privileges Problem: Please Help

On Mon, Nov 9, 2009 at 12:44 PM, Victor Subervi <victorsube...@gmail.com> wrote:
> Did you give up on me?
> V

Please don't top-post.

    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Rami Chowdhury  
View profile  
 More options Nov 10, 5:14 am
Newsgroups: comp.lang.python
From: "Rami Chowdhury" <rami.chowdh...@gmail.com>
Date: Mon, 09 Nov 2009 10:14:28 -0800
Local: Tues, Nov 10 2009 5:14 am
Subject: Re: Serious Privileges Problem: Please Help
On Mon, 09 Nov 2009 09:44:24 -0800, Victor Subervi  

OK, after all this I've forgotten what your .py file looked like -- can  
you post that please?

--
Rami Chowdhury
"Never attribute to malice that which can be attributed to stupidity" --  
Hanlon's Razor
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Rami Chowdhury  
View profile  
 More options Nov 10, 5:53 am
Newsgroups: comp.lang.python
From: "Rami Chowdhury" <rami.chowdh...@gmail.com>
Date: Mon, 09 Nov 2009 10:53:04 -0800
Local: Tues, Nov 10 2009 5:53 am
Subject: Re: Serious Privileges Problem: Please Help
On Mon, 09 Nov 2009 10:36:31 -0800, Victor Subervi  

Can you try running index.py from the command-line, and let me know if  
that works?

Also, as you've already been asked - please start your replies *below* the  
text you are replying to. Putting your replies above the last email, or  
"top-posting" makes reading long email threads with lots of text  
distracting and frustrating.

--
Rami Chowdhury
"Never attribute to malice that which can be attributed to stupidity" --  
Hanlon's Razor
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Rami Chowdhury  
View profile  
 More options Nov 10, 6:27 am
Newsgroups: comp.lang.python
From: "Rami Chowdhury" <rami.chowdh...@gmail.com>
Date: Mon, 09 Nov 2009 11:27:25 -0800
Local: Tues, Nov 10 2009 6:27 am
Subject: Re: Serious Privileges Problem: Please Help
On Mon, 09 Nov 2009 11:24:33 -0800, Victor Subervi  

What platform did you upload from? Something as seemingly insignificant as  
Windows line-endings can mess up file execution...

--
Rami Chowdhury
"Never attribute to malice that which can be attributed to stupidity" --  
Hanlon's Razor
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Dave Angel  
View profile  
 More options Nov 10, 1:12 pm
Newsgroups: comp.lang.python
From: Dave Angel <da...@ieee.org>
Date: Mon, 09 Nov 2009 21:12:21 -0500
Local: Tues, Nov 10 2009 1:12 pm
Subject: Re: Serious Privileges Problem: Please Help

What I've diagnosed as happening when a python script with Windows
line-ending was posted on my server's cgi environment:

The actual error seemed to be a failure to find the python interpreter,
since some Unix shells take the shebang line to include the \r character
that preceded the newline.   Seems to me they could be more tolerant,
since I don't think control characters are likely in the interpreter
file name.

DaveA


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Scott David Daniels  
View profile  
 More options Nov 11, 2:08 am
Newsgroups: comp.lang.python
From: Scott David Daniels <Scott.Dani...@Acm.Org>
Date: Tue, 10 Nov 2009 07:08:03 -0800
Local: Wed, Nov 11 2009 2:08 am
Subject: Re: Serious Privileges Problem: Please Help

You could work around this by creating a symlink (or even hard link to
the python executable named "python\r"

--Scott David Daniels
Scott.Dani...@Acm.Org


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
End of messages
« Back to Discussions « Newer topic     Older topic »

Create a group - Google Groups - Google Home - Terms of Service - Privacy Policy
©2009 Google