Problems after yum update with selinux

Support for webhosts that use CentOS
Post Reply
holgenoni
Posts: 3
Joined: 2011/05/05 08:55:17

Problems after yum update with selinux

Post by holgenoni » 2011/05/05 09:11:04

Hello @ all,

today I made a yum update and now fast-cgi is not working on my server. (permission problems I think)
When I change the web in plesk to apache-module then it works.

Following have been updated:
May 03 16:03:38 Updated: glibc-2.5-58.el5_6.3.i686
May 05 08:39:39 Updated: httpd-2.2.3-45.el5.centos.1.x86_64
May 05 08:39:40 Updated: 1:mod_ssl-2.2.3-45.el5.centos.1.x86_64
May 05 08:39:41 Updated: sed-4.1.5-8.el5.x86_64
May 05 08:39:42 Updated: kudzu-1.2.57.1.26-1.el5.centos.1.x86_64
May 05 08:39:42 Updated: screen-4.0.3-4.el5.x86_64
May 05 08:39:46 Updated: selinux-policy-2.4.6-300.el5_6.1.noarch
May 05 08:40:08 Updated: selinux-policy-targeted-2.4.6-300.el5_6.1.noarch


I got the following error at the update:
webuser1 homedir /var/www/vhosts/domain.com or its parent directory conflicts with a
defined context in /etc/selinux/targeted/contexts/files/file_contexts,
/usr/sbin/genhomedircon will not create a new context. This usually indicates an incorrectly defined system account. If it is a system account please make sure its login shell is /sbin/nologin.

This error is shown on every webuser created with plesk.


It looks like selinux is causing this problem. But selinux is disabled!

I've tried to google the error but I didn't found no usefull information.

Thanks in advice for any help!

Best regards
Andy

holgenoni
Posts: 3
Joined: 2011/05/05 08:55:17

Re: Problems after yum update with selinux

Post by holgenoni » 2011/05/05 10:12:47

I've now tried to deactivate sulinux also in "/etc/grub.conf" by adding "selinux=0" at the kernel line but still the same problem.
Now I'm not quite sure if the problem is really caused by selinux (because it should be really disabled).

What else could cause this problem?

When I try to acces a webpage I get error 500
(but only if fast-cgi is configured)


What can I do?

Please help because I'm now searching for about 4 hours without a result.


PS: I remember a few weeks ago I got the same error after "yum update". But then I did a plesk update (because a new version was available) and after that it worked again. It seems that the update of plesk solved the problem. But this time there is no plesk update. And I would really like to know what coauses this problem so I don't get it every time I do a yum update.

Thanks for any help.

Best regards
Andy

holgenoni
Posts: 3
Joined: 2011/05/05 08:55:17

Re: Problems after yum update with selinux

Post by holgenoni » 2011/05/05 10:53:53

Hello @ all,

I found a solution.

And thats how I solve it:

cp /usr/sbin/suexec /usr/sbin/suexec.dist
cp -f /usr/local/psa/suexec/psa-suexec /usr/sbin/suexec
chown root:apache /usr/sbin/suexec
chmod 4510 /usr/sbin/suexec
/etc/init.d/httpd restart


Maybe it's usefull for someone

pschaff
Retired Moderator
Posts: 18276
Joined: 2006/12/13 20:15:34
Location: Tidewater, Virginia, North America
Contact:

Problems after yum update with selinux

Post by pschaff » 2011/05/05 13:58:46

Welcome to the CentOS fora. Reading [url=https://www.centos.org/modules/newbb/viewforum.php?forum=47]FAQ & Readme First[/url] is recommended for new users.

Glad you found something that worked for you, but it is generally not a good idea to replace a component of a core package.[code]
# rpm -qf /usr/sbin/suexec
httpd-2.2.3-45.el5.centos[/code]
I have no idea where /usr/local/psa/suexec/psa-suexec comes from, but Plesk is well known for changing core components and doing things its own way.

[url=http://wiki.centos.org/AdditionalResources/OtherSpins]When CentOS Is Not CentOS[/url]
[url=http://wiki.centos.org/TipsAndTricks/BrokenVserver]Broken Virtual Server[/url]

Post Reply

Return to “CentOS 5 - Webhosting Support”