home | list info | list archive | date index | thread index

Re: access to mdadm raid1 "disk" from apache2?

The error.log said apache didn't have permission.

I'm not running RH or family (I'm on Linux Mint), so I don't think selinux
is active. I've had fun with that at uOttawa.

auseach was not installed, but journalctl -b gave a huge output. It showed
rather a lot of complaints, I suspect because I recently upgraded to LM 19.1 Tessa
and things haven't quite settled yet. One of the line did mention

"udisksd[1108]: failed to load module mdraid: libbd_mdraid.so.2: cannot open shared object file: No such file or directory"

The disk is accessible by most tools, but perhaps as this was just under "Starting Network Manager Script",
it is relevant.

JN

On 2019-03-20 4:53 p.m., Richard Guy Briggs wrote:
> On 2019-03-20 16:03, J C Nash wrote:
>> To facilitate some genealogy work at home, I've found it helpful to point local apache2
>> server at some of my files. This seemed to work fine by just putting a symlink to directories
>> in my /home/john area. However, today I tried a symlink to a directory on a RAID1 disk (/dev/md0
>> in my system, mounted at /media/john/J6R).
>>
>> For some reason I've had no success. Read lots of "help" pages, but no joy.
>>
>> Things I've played with (possibly incorrectly):
>>
>> - user and group ownership of various objects
>> - (re)mount disk with gid for www-date and uid for me
>> - restarts of Apache2
>> - apache2.conf adjustment for directory, available  and enabled (symlink),
>>   adding FollowSymLinks etc.
>>
>> I've a sneaking suspicion that mdadm disks may need some special setting, or else I'm
>> missing something very simple that is staring me in the face.
> 
> I have a sneaking suspicion it is selinux chucking a fault on labels...
> I'm certainly no expert on selinux but it sounds like apache doesn't
> have permission to read the files or filesystem you are trying to feed
> it.
> 
> Are there any messages in the audit log?  "ausearch -i -start recent"
> may give you a clue, or it may be in "journalctl -b" if audit is not
> enabled.
> 
>> This isn't terribly urgent or necessary, but it would be nice to know what is going on.
>>
>> Probably not something that is easy to sort out by the list, so maybe
>> offline until worked out.
>>
>> JN
> 
> 	slainte mhath, RGB
> 
> --
> Richard Guy Briggs               --  ~\    -- ~\             <hpv.tricolour.ca>
> <www.TriColour.ca>                 --  \___   o \@      @        Ride yer bike!
> Ottawa, ON, CANADA                  --  Lo_>__M__\\/\%__\\/\%
> Vote! -- <greenparty.ca>_____GTVS6#790__(*)__(*)________(*)(*)_________________
> 

To unsubscribe send a blank message to linux+unsubscribe [ at ] linux-ottawa [ dot ] org
To get help send a blank message to linux+help [ at ] linux-ottawa [ dot ] org
To visit the archives: https://lists.linux-ottawa.org