Serious Privileges Problem: Please Help

Victor Subervi victorsubervi at gmail.com
Sun Nov 8 12:40:58 EST 2009


[root at 13gems angrynates.com]# chcon -R -h
unconfined_u:object_r:httpd_sys_content_t global_solutions/*

Then I surfed to
http://209.216.9.56/global_solutions/index.py

[root at 13gems angrynates.com]# tail /var/log/messages
Nov  8 04:26:02 13gems syslogd 1.4.1: restart.
[root at 13gems angrynates.com]# tail /var/log/httpd/error_log
[Sun Nov 08 05:35:10 2009] [notice] Digest: generating secret for digest
authentication ...
[Sun Nov 08 05:35:10 2009] [notice] Digest: done
[Sun Nov 08 05:35:10 2009] [notice] mod_python: Creating 4 session mutexes
based on 10 max processes and 0 max threads.
[Sun Nov 08 05:35:10 2009] [notice] Apache/2.2.3 (CentOS) configured --
resuming normal operations
[Sun Nov 08 07:29:40 2009] [error] [client 66.248.168.98] File does not
exist: /var/www/html/angrynates.com/favicon.ico
[Sun Nov 08 07:29:40 2009] [error] [client 66.248.168.98] (2)No such file or
directory: exec of '/var/www/html/angrynates.com/global_solutions/index.py'
failed, referer: http://209.216.9.56/global_solutions/
[Sun Nov 08 07:29:40 2009] [error] [client 66.248.168.98] Premature end of
script headers: index.py, referer: http://209.216.9.56/global_solutions/
[Sun Nov 08 09:38:44 2009] [error] [client 66.248.168.98] File does not
exist: /var/www/html/angrynates.com/favicon.ico
[Sun Nov 08 09:38:44 2009] [error] [client 66.248.168.98] (2)No such file or
directory: exec of '/var/www/html/angrynates.com/global_solutions/index.py'
failed, referer: http://209.216.9.56/global_solutions/
[Sun Nov 08 09:38:44 2009] [error] [client 66.248.168.98] Premature end of
script headers: index.py, referer: http://209.216.9.56/global_solutions/

TIA,
V

On Sun, Nov 8, 2009 at 12:28 PM, Rami Chowdhury <rami.chowdhury at gmail.com>wrote:

> On Sunday 08 November 2009 05:44:31 Victor Subervi wrote:
> > [root at 13gems angrynates.com]# chcon -u unconfined_u -r object_r -t
> > httpd_sys_content_t global_solutions
> > chcon: can't apply partial context to unlabeled file global_solutions
> > Please advise.
>
> Try 'chcon -R -h unconfined_u:object_r:httpd_sys_content_t
> global_solutions/*', which should specify the whole context at once and
> avoid
> that error, as well as apply it recursively to all files and
> subdirectories.
>
> Also, to narrow down the error, can you let us have the output of:
>        tail /var/log/messages
>         tail /var/log/httpd/error_log
>
> HTH,
> Rami
>
> ----
> Rami Chowdhury
> "As an online discussion grows longer, the probability of a comparison
> involving Nazis or Hitler approaches one." -- Godwin's Law
> 408-597-7068 (US) / 07875-841-046 (UK) / 0189-245544 (BD)
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-list/attachments/20091108/295879ec/attachment-0001.html>


More information about the Python-list mailing list