Open-AudIT
https://www.open-audit.org/phpBB3/

New Install Error 1.5.2
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=6386
Page 1 of 1

Author:  jainsworth [ Thu Dec 04, 2014 6:52 am ]
Post subject:  New Install Error 1.5.2

I have a fresh install on Centos 6.6 using the latest 1.5.2 install file. The site works fine, but is throwing a PHP error at times. It appears it has a problem writing to the log file. I have checked permissions and they are 660, and have changed them to 770 to no avail. Any assistance would be welcome. Here is a screenshot.

[attachment=0] open-audit-error.jpg
open-audit-error.jpg [ 75.85 KiB | Viewed 7973 times ]

Author:  Mark [ Thu Dec 04, 2014 9:31 am ]
Post subject:  Re: New Install Error 1.5.2

I would try 666 for file permission.
The file is likely owned by root but needs to be read and written to by other users (actually the apache user).
I'll check the installer, but I was pretty sure it set this for us...

EDIT - The installer was setting the permission to 0644. This was incorrect. I have now changed it to 0666. Apologies for the inconvenience. This will be included in the next release.

Author:  jainsworth [ Thu Dec 04, 2014 12:07 pm ]
Post subject:  Re: New Install Error 1.5.2

Thanks Mark. I did change permissions to 666 to no avail.

Here is the screen grab of the file now. Any other thoughts?

[attachment=0] Screen Shot 2014-12-03 at 8.05.16 PM.png
Screen Shot 2014-12-03 at 8.05.16 PM.png [ 13.01 KiB | Viewed 7964 times ]

Author:  Mark [ Fri Dec 05, 2014 7:27 am ]
Post subject:  Re: New Install Error 1.5.2

If you're on CentOS then the user running Apache should be the "apache" user.
That user (from your screenshot) is the Group owner of the file.
The file has RW on it for everyone.

I'm at a loss why that user cannot write to that file.

Author:  Mark [ Fri Dec 05, 2014 9:55 am ]
Post subject:  Re: New Install Error 1.5.2

UPDATE - SELinux!

Taken from "info ls".

[quote] Following the file mode bits is a single character that specifies
whether an alternate access method such as an access control list
applies to the file. When the character following the file mode
bits is a space, there is no alternate access method. When it is
a printing character, then there is such a method.

GNU `ls' uses a `.' character to indicate a file with an SELinux
security context, but no other alternate access method.

A file with any other combination of alternate access methods is
marked with a `+' character.

So you can either disable SELinux or you may be able to set the correct flag via "chcon".

We do recommend disabling SELinux (because of issues like this), but that option is entirely up to you and your security team.

The installer script could detect if SELinux is enabled and advise the user. I'll get a ticket logged for this.
FYI - we can't have the installer run a "chcon" because of SELinux - chicken, meet egg.

Author:  jainsworth [ Sat Dec 06, 2014 8:32 am ]
Post subject:  Re: New Install Error 1.5.2 [Solved]

SELinux disabled and all is working well. Thank you for the help Mark.

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/