[Bug 1186267] New: ERROR: failed to open configuration file /etc/php8/fpm/php-fpm.conf : Permission denied (13)
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 Bug ID: 1186267 Summary: ERROR: failed to open configuration file /etc/php8/fpm/php-fpm.conf : Permission denied (13) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs@suse.de Reporter: eric@madrid.lol QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- I have been having this problem since PHP 8.x was added to the repository, php 7.x works fine. I finally had to resort to using Apache, which does not require php-fpm, for all my openSuSE TW servers... I have no problem using NGiNX and php-fpm 8.x with openSuSE Leap. But, openSuSE TW will not run php-fpm 8.x... [18-May-2021 13:58:55] ERROR: failed to open configuration file '/etc/php8/fpm/php-fpm.conf': Permission denied (13) Thanks, for all your hard work! -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c2 --- Comment #2 from Eric Madrid <eric@madrid.lol> --- The standard permissions for a clean install: root:root This is a clean install, nothing added or customized. Since php 8.x was added to this repository: https://download.opensuse.org/repositories/devel:/languages:/php/openSUSE_Fa... It has had this problem, 6 months now, PHP 7.x works fine. I use Apache & php 8.x for Tumbleweed, no php-fpm needed. I have been using NGINX and PHP-FPM together for a while. From my experience, PHP and openSuSE TW seem to have issues. Especially php-fpm, it seems the attention to php with TW is low. I know php is being phased out and python is the way to go. I'm old school, I like php! It works fine with openSuSE Leap 15.x no issue, ever. I use this repository for Leap: https://download.opensuse.org/repositories/devel:/languages:/php/openSUSE_Le... openSuSE Tumbleweed has been my main bleeding edge Linux for a while. But after fighting php-fpm with TW for a few years now... I've switched to Fedora... :( I still use openSuSE Leap as my stable go to Linux. https://www.team3.net/ https://www.team3.org/ -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c4 --- Comment #4 from Eric Madrid <eric@madrid.lol> --- No sir, "fresh install" means new VM, latest ISO. Add this repos: nano /etc/zypp/repos.d/php.repo [devel_languages_php] name=devel:languages:php (openSUSE_Factory) type=rpm-md baseurl=https://download.opensuse.org/repositories/devel:/languages:/php/openSUSE_Fa... gpgcheck=1 gpgkey=https://download.opensuse.org/repositories/devel:/languages:/php/openSUSE_Fa... enabled=1 zypper ref -f zypper update reboot if needed zypper in php8-fpm cp /etc/php8/fpm/php-fpm.conf.default /etc/php8/fpm/php-fpm.conf ERROR: failed to open configuration file '/etc/php8/fpm/php-fpm.conf' Permission denied (13) Same process worked before 8.x and works fine with Leap w/ 8.x, different repos. I've gone round and round with this, makes no sense to me. I can open the file: nano /etc/php8/fpm/php-fpm.conf Everything looks fine, I check all the paths, over and over... I've put it in a different path, I've slammed my keyboard... lol, ok, I wanted too... I have probably built 100+ openSuSE TW VM servers, this is a first... It is strange... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c5 --- Comment #5 from Arjen de Korte <suse+build@de-korte.org> --- This really doesn't make sense. Do you happen to use apparmor? It could be blocking access to this file. Is so, it looks like neither apparmor-abstractions nor apparmor-profiles allows access to this file out of the box. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 M Fredericks <emfee@gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |emfee@gmx.net -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 Arjen de Korte <suse+build@de-korte.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pgajdos@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c6 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de --- Comment #6 from Christian Boltz <suse-beta@cboltz.de> --- Indeed, nobody told AppArmor (especially abstractions/php) about PHP 8, but OTOH the /etc/apparmor.d/php-fpm profile covers /usr/sbin/php-fpm* As a hotfix, you can create a file /etc/apparmor.d/abstractions/php.d/php8 with the following content: /etc/php{,5,7,8}/**/ r, /etc/php{,5,7,8}/**.ini r, /usr/lib{64,}/php{,5,7,8}/*/*.so mr, /var/lib/php{,5,7,8}/session_mm_* rwlk, /var/lib/php{,5,7,8}/sess_* rwlk, /var/lib/php{,5,7,8}/sessions/* rwlk, /usr/share/php{,5,7,8}/ r, /usr/share/php{,5,7,8}/** mr, and then run rcapparmor reload I submitted these additions upstream as https://gitlab.com/apparmor/apparmor/-/merge_requests/755 and to the AppArmor package (SR 894865). -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c7 --- Comment #7 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1186267) was mentioned in https://build.opensuse.org/request/show/894865 Factory / apparmor -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c9 --- Comment #9 from Eric Madrid <eric@madrid.lol> --- Thank you very much!!! That fixed it. Took a little tweaking with NGiNX stuff, but working! http://2ze.ro:8005/ Go to about! Thanks again, Eric. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c11 Roy Bellingan <tsmtgdi@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |tsmtgdi@gmail.com Resolution|FIXED |--- --- Comment #11 from Roy Bellingan <tsmtgdi@gmail.com> --- Very sorry but I am still suffering from this bug. Tumbleweed installed from iso downloaded on 2021/10/07 If I run under strace I have strace php-fpm ... openat(AT_FDCWD, "/etc/php8/fpm/php-fpm.conf", O_RDONLY) = -1 EACCES (Permission denied) ll /etc/php8/fpm/php-fpm.conf -rwxrwxrwx 1 root root 5324 Oct 9 00:50 /etc/php8/fpm/php-fpm.conf if I stop rcapparmor stop Still same problem But now the funny part! cp /etc/php8/fpm/php-fpm.conf /tmp/miao strace php-fpm --fpm-config /tmp/miao openat(AT_FDCWD, "/tmp/miao", O_RDONLY) = -1 EACCES (Permission denied) o.O Of course if I put a wrong path openat(AT_FDCWD, "/tmp/miao2", O_RDONLY) = -1 ENOENT (No such file or directory) BTW I see that a few lines before it was able to open openat(AT_FDCWD, "/etc/php8/conf.d/zlib.ini", O_RDONLY) = 3 And the other config file I will try later if I can to compile in local and see what it happens. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c12 Markus Elfring <Markus.Elfring@web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Markus.Elfring@web.de --- Comment #12 from Markus Elfring <Markus.Elfring@web.de> --- Will the affected components be improved any further (also according to the software package ���php8-fpm 8.0.13-36.8���)? How will the clarification evolve for related issues? Example: Failed to start The PHP FastCGI Process Manager. https://bugzilla.opensuse.org/show_bug.cgi?id=1178655 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c15 --- Comment #15 from Roy Bellingan <tsmtgdi@gmail.com> --- I reported another problem in the apparmor bugtracker https://gitlab.com/apparmor/apparmor/-/issues/229 In short the default session path is /tmp which is NOT ALLOWED The allowed one are # php session mmap socket /var/lib/php{,5,7,8}/session_mm_* rwlk, # file based session handler /var/lib/php{,5,7,8}/sess_* rwlk, /var/lib/php{,5,7,8}/sessions/* rwlk, -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1186267 http://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c17 --- Comment #17 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1186267) was mentioned in https://build.opensuse.org/request/show/974768 Factory / apparmor -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com