Serious Privileges Problem: Please Help

[Rami Chowdhury]

On Saturday 07 November 2009 06:13:11 Victor Subervi wrote:
> I have a serious privileges problem that is making it impossible to serve
> python pages on a CentOS server. It appears that nobody on the CentOS
> discussion list has a solution to this problem. I'm desperate and hoping
> someone on this list can help.
> 
> [Fri Nov 06 11:50:40 2009] [error] [client 66.248.168.98] (2)No such file
>  or directory: exec of
>  '/var/www/html/angrynates.com/global_solutions/index.py' failed, referer:
>  http://angrynates.com/global_solutions/
> [Fri Nov 06 11:50:40 2009] [error] [client 66.248.168.98] Premature end of
> script headers: index.py, referer: http://angrynates.com/global_solutions/
> 
> Now, the file does exist:
> 
> [root at 13gems global_solutions]# pwd
> /var/www/html/angrynates.com/global_solutions
> [root at 13gems global_solutions]# ls
> ....
> -rwxr-xr-x 1 victor victor 275 Nov 6 07:05 index.py
> ....
> and it serves just fine on another server, so there is no "premature end of
> script headers".
> 
> 
> Here's where it gets really weird. If I copy the code for index.py and
> template.py which the former calls, and create files test.py and test2.py
> and paste the code from the former files in those new files changing only
> the import statement from "template" to "test2", the tests will resolve!!
> Now, the ownership and mode are identical on all of them!!
> 
> 
> [root at 13gems global_solutions]# ls -al | grep test.py
> -rwxr-xr-x 1 root root 298 Nov 6 12:24 test.py
> [root at 13gems global_solutions]# ls -al | grep test2.py
> -rwxr-xr-x 1 root root 5716 Nov 6 12:25 test2.py
> [root at 13gems global_solutions]# ls -al | grep index.py
> -rwxr-xr-x 1 root root 316 Nov 6 07:05 index.py
> [root at 13gems global_solutions]# ls -al | grep template.py
> -rwxr-xr-x 1 root root 5806 Nov 6 07:06 template.py
> -rwxr-xr-x 1 root root 6093 Nov 6 07:06 template.pyc
> 
> where test.py is identical to index.py (other than the necessary import)
>  and template is identical to test2.py
> 
> 
> fixfiles relabel /var/www/html
> # might just work
> It didn't
> 
> touch /.autorelabel
> # and then reboot will relabel all copied files to the correct contexts for
> the location
> I rebooted apache with no luck
> 
> or you could turn off SELinux and reboot
> I did that and the following two solutions with no luck:
> echo 0 >/selinux/enforce
> 
> [root at 13gems ~]# cd /etc/
> [root at 13gems etc]# mv selinux/ selinux.BAK
> [root at 13gems etc]# mkdir selinux
> [root at 13gems etc]# echo 0>/selinux/enforce
> 
> ...and the problem continues:
> [root at 13gems etc]# tail /var/log/httpd/error_log
> [Fri Nov 06 12:51:49 2009] [error] [client 66.248.168.98] Premature end of
> script headers: index.py, referer: http://angrynates.com/global_solutions/
> [Fri Nov 06 12:56:18 2009] [error] [client 66.248.168.98] (2)No such file
>  or directory: exec of
>  '/var/www/html/angrynates.com/global_solutions/index.py' failed, referer:
>  http://angrynates.com/global_solutions/
> [Fri Nov 06 12:56:18 2009] [error] [client 66.248.168.98] Premature end of
> script headers: index.py, referer: http://angrynates.com/global_solutions/
> [Fri Nov 06 12:56:20 2009] [error] [client 67.96.172.81] (2)No such file or
> directory: exec of '/var/www/html/angrynates.com/global_solutions/index.py'
> failed
> [Fri Nov 06 12:56:20 2009] [error] [client 67.96.172.81] Premature end of
> script headers: index.py
> [Fri Nov 06 13:52:15 2009] [error] [client 66.249.67.153] File does not
> exist: /var/www/html/angrynates.com/robots.txt
> [Fri Nov 06 13:52:52 2009] [error] [client 208.84.198.58] (2)No such file
>  or directory: exec of
>  '/var/www/html/angrynates.com/global_solutions/index.py' failed, referer:
>  http://angrynates.com/global_solutions/
> [Fri Nov 06 13:52:52 2009] [error] [client 208.84.198.58] Premature end of
> script headers: index.py, referer: http://angrynates.com/global_solutions/
> [Fri Nov 06 13:52:52 2009] [error] [client 208.84.198.58] File does not
> exist: /var/www/html/angrynates.com/favicon.ico
> [Fri Nov 06 13:52:53 2009] [error] [client 208.84.198.58] File does not
> exist: /var/www/html/angrynates.com/favicon.ico
> [root at 13gems etc]#
> 
> Please help.
> Victor
> 

Can we see the output of 'ls -lZ' and 'fixfiles check' on those directories, 
and see what the Apache (httpd.conf or .htaccess) configuration is for them?

----
Rami Chowdhury
"Passion is inversely proportional to the amount of real information 
available." -- Benford's Law of Controversy
408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)