主页 / user-284590

Mark J. Bobak's questions

Martin Hope
Mark J. Bobak
Asked: 2021-09-17 07:14:27 +0800 CST
  • 5

我试图让特定用户能够使用 sudo 运行两个命令，而无需提示输入密码。这就是我所做的：

# temporarily grant privs to nitsadmin
Cmnd_Alias REBOOT = /usr/sbin/reboot
Cmnd_Alias STOP_START_CRUSHFTP = /var/opt/Crushftp/crushftp_init.sh

nitsadmin ALL=(ALL) NOPASSWD: STOP_START_CRUSHFTP, REBOOT

reboot 命令完全按预期工作，但 crushftp_init.sh 命令坚持提示输入密码。

帮助？

在回复第一条评论时，这就是我所看到的：

nitsadmin@dropbox:~$ sudo /var/opt/CrushFTP10/crushftp_init.sh stop
[sudo] password for nitsadmin:

所以我很确定这sudo是在提示输入密码。

sudo
Martin Hope
Mark J. Bobak
Asked: 2020-06-01 17:47:57 +0800 CST
  • 6

我在通话时被拒绝fopen()，但前提是从 Apache 执行 PHP 脚本。

  • 我尝试过检查和仔细检查权限，甚至尝试在正在写入的文件和包含该文件的目录上设置 777。
  • selinux 被“禁用”。

遇到错误的行是：

$logfile = fopen('/var/log/httpd/shib_session_logs/'.$filename,'a+');

/var/log/httpd/error_log 的错误是：

[Sun May 31 21:33:40.012053 2020] [php7:warn] [pid 30107:tid 140627505252096] [client 10.0.1.206:39032] PHP Warning:  fopen(/var/log/httpd/shib_session_logs/session_log_202061.log): failed to open stream: Permission denied in /var/www/html/shib/logwritter.php on line 9, referer: https://aiqsso.awsapps.com/start

最后，如果我在命令行运行，不涉及 Apache，它工作正常。

这有效：

php index.php

帮助？

添加信息：

这是/etc/httpd/conf.d/php.conf文件：

#
# The following lines prevent .user.ini files from being viewed by Web clients.
#
<Files ".user.ini">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
        Satisfy All
    </IfModule>
</Files>

#
# Allow php to handle Multiviews
#
AddType text/html .php

#
# Add index.php to the list of files that will be served as directory
# indexes.
#
DirectoryIndex index.php

# mod_php options
<IfModule  mod_php7.c>
    #
    # Cause the PHP interpreter to handle files with a .php extension.
    #
    <FilesMatch \.(php|phar)$>
        SetHandler application/x-httpd-php
    </FilesMatch>

    #
    # Uncomment the following lines to allow PHP to pretty-print .phps
    # files as PHP source code:
    #
    #<FilesMatch \.phps$>
    #    SetHandler application/x-httpd-php-source
    #</FilesMatch>

    #
    # Apache specific PHP configuration options
    # those can be override in each configured vhost
    #
    php_value session.save_handler "files"
    php_value session.save_path    "/var/lib/php/session"
    php_value soap.wsdl_cache_dir  "/var/lib/php/wsdlcache"

    #php_value opcache.file_cache   "/var/lib/php/opcache"
</IfModule>

需要帮助请叫我。

linux apache-http-server