[otrs] Permission problems when accessing SysConfig

[Robertino Hermansson]

Problem solved!

Got it working now, the problem was with SELinux and policies.
This discussion solved it:
http://lists.otrs.org/pipermail/dev/2005-September/001117.html
First installed the package:
selinux-policy-targeted-sources-1.17.30-2.126.noarch.rpm
And added the following lines to
/etc/selinux/targeted/src/policy/domains/program/apache.te

allow httpd_t policy_src_t:dir search;
allow httpd_t usr_t:dir write;
allow httpd_t usr_t:dir add_name;
allow httpd_t usr_t:file create;
allow httpd_t usr_t:file write;
allow httpd_t usr_t:file append;

the 2 last lines where not mentioned in the previous post
but where added also and then it seems to work.

then restarted httpd.

thanks for your help Nils.


--Robertino


On 6/7/06, Nils Breunese (Lemonbit Internet) <nils at lemonbit.nl> wrote:
>
> Robertino Hermansson wrote:
>
> > Maybe I should try to get the webserver running as otrs/otrs and
> > see if that helps, don't know
> > if it is possible though.
>
> It may be possible, but I have it all working with apache just
> running as apache. What are the permissions and owners of /opt/otrs/
> Kernel/Config/Files/ZZZAAutio.pm on your machine? Mine has:
>
> drwxr-xr-x      root root                       (for /opt)
> drwxrwxr-x      otrs apache             (for /opt/otrs)
> drwxrwxr-x      apache apache   (for /opt/otrs/Kernel)
> drwxrwxr-x      apache apache   (for /opt/otrs/Kernel/Config)
> drwxrwxr-x      apache apache   (for /opt/otrs/Kernel/Config/Files)
> -rw-r--r--              apache apache   (for
> /opt/otrs/Kernel/Config/Files/
> ZZZAAuto.pm)
>
> So yeah, apache should be able to write this file. However, on your
> system that seems to be a problem:
>
> >  Message: Can't write /opt/otrs/Kernel/Config/Files/ZZZAAuto.pm:
> > Permission denied!, referer: http://<hostname>/index.pl?Action=Admin
>
> Nils Breunese.
> _______________________________________________
> OTRS mailing list: otrs - Webpage: http://otrs.org/
> Archive: http://lists.otrs.org/pipermail/otrs
> To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
> Support orr consulting for your OTRS system?
> => http://www.otrs.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.otrs.org/pipermail/otrs/attachments/20060608/21223573/attachment.html