ssl error log: file not writable by apache

[junkertf]

Hello,

Can i ask a question that what miss in an upgrade procedure from nagiosxi 5.4.11 to 5.5.1?
The process was an online upgrade.sh without huge errors, after i had made a full nagios service stop, chowned the nagiosxi directory to nagios:nagios and after i made a full os restart, without any success...

My nagios directories are in /app FS and are symlinked to /usr FS...

Currently i still become errors into the /var/log/httpd/ssl_error_log file like:

[Mon Jul 23 14:06:17.746999 2018] [:error] [pid 32673] [client 3.149.205.6:60057] PHP Notice: CCM Config File: /usr/local/nagiosxi/etc/components/ccm_config.inc.php is not writable by apache! in /app/nagiosxi/html/includes/components/ccm/ccm.inc.php on line 120, referer: https://nagiosinfrauat.bbrt.hu/nagiosxi ... d=MY35imQ6

OS informations

[root@ ~]# id nagios
uid=5500(nagios) gid=5500(nagios) groups=5500(nagios),16662(nagcmd)
[root@ ~]# id apache
uid=48(apache) gid=48(apache) groups=48(apache),5500(nagios),16662(nagcmd)

[root@myhuslhqbpinagt ~]# ls -l /app/
total 56800
drwxrwx---+ 2 root root 16384 Jan 4 2018 lost+found
drwxrwxr-x+ 9 root root 4096 Jan 4 2018 nagios
drwxrwxr-x+ 6 root root 4096 May 7 09:57 nagiosmobile
drwxrwxr-x+ 10 nagios nagios 4096 Jan 4 2018 nagiosxi
...
drwxrwxr-x+ 5 apache apache 4096 Jan 4 2018 nagvis

[root@myhuslhqbpinagt ~]# ls -l /usr/local/
total 68
...
lrwxrwxrwx 1 root root 11 Jan 4 2018 nagios -> /app/nagios
lrwxrwxrwx 1 root root 17 Jan 4 2018 nagiosmobile -> /app/nagiosmobile
drwxr-xr-x 6 root root 4096 Jan 4 2018 nagiosmobile_old
drwxr-xr-x 9 root root 4096 Jan 4 2018 nagios_old
lrwxrwxrwx 1 nagios nagios 13 Jan 4 2018 nagiosxi -> /app/nagiosxi
drwxr-xr-x 10 nagios nagios 4096 Jan 4 2018 nagiosxi_old
drwxr-xr-x 5 apache apache 4096 Jul 18 13:00 nagvis
drwxr-xr-x 5 apache apache 4096 Jan 4 2018 nagvis_old
lrwxrwxrwx 1 root root 11 Jan 4 2018 nagvis.old-2018-07-18_13:00:33 -> /app/nagvis

Also the question, what i realized now, that the nagvis upgrade would so way incorrect (the old directory is also a symlink, but the new is permanently placed into the usr-local directory)


Thank you, best regards,

Ferenc

[junkertf]

Also an information:

[root@ ~]# ls -l /usr/local/nagiosxi/etc/components/ccm_config.inc.php
-rw-rw-r--+ 1 nagios nagios 647 Jul 18 13:04 /usr/local/nagiosxi/etc/components/ccm_config.inc.php


Best Regards,

Ferenc

[scottwilkerson]

Also an information:

[root@ ~]# ls -l /usr/local/nagiosxi/etc/components/ccm_config.inc.php
-rw-rw-r--+ 1 nagios nagios 647 Jul 18 13:04 /usr/local/nagiosxi/etc/components/ccm_config.inc.php


Best Regards,

Ferenc

+ in the permissions means that the file has additional ACLs set.

Code: Select all

getfacl /usr/local/nagiosxi/etc/components/ccm_config.inc.php

[junkertf]

omg...

Thanks, right, solved.
Don't understand how, but the ACL overwrited the standard permissions, and group nagios had only r permission on the directory.
Replaced with explicit permission to group nagios and the error log gone..

Best regards,

Ferenc

[scottwilkerson]

omg...

Thanks, right, solved.
Don't understand how, but the ACL overwrited the standard permissions, and group nagios had only r permission on the directory.
Replaced with explicit permission to group nagios and the error log gone..

Best regards,

Ferenc

Glad it is resolved.

Locking