No subject
Sun Mar 31 09:34:23 UTC 2013
"setsebool -P httpd_execmem 1".
Now everything is working fine.
Cheers!
2013/10/17 Vitor Baptista <vitor at vitorbaptista.com>
> Hi,
>
> I figured out that SELinux is the culprit. If I disable it, everything
> goes on fine. I tried following the instructions at
> https://github.com/okfn/ckan/wiki/How-to-Install-CKAN-2.0-on-CentOS-6.3#a=
djust-the-selinux-file-contexts,
> but that didn't work.
>
> Looking at dmesg, I got:
>
> type=3D1400 audit(1382056990.260:30750): avc: denied { execmem } for
>> pid=3D13011 comm=3D"httpd" scontext=3Dunconfined_u:system_r:httpd_t:s0
>> tcontext=3Dunconfined_u:system_r:httpd_t:s0 tclass=3Dprocess
>> httpd[13011] general protection ip:7fb21cca3bbd sp:7fb229fd4320 error:0
>> in _ctypes.so[7fb21cc95000+1a000]
>
>
> So there was an execmem that was denied. But what now? How to give httpd
> permissions?
>
> Cheers,
>
>
> 2013/10/11 Vitor Baptista <vitor at vitorbaptista.com>
>
>> Hi Adri=E0,
>>
>> That runs without problems, and if I'm able to run the server with paste=
r
>> as well, so the extension should be installed correctly. It's only when =
I
>> try with Apache that I get that error.
>>
>> Do you have any other ideas of the possible culprit?
>>
>> Cheers,
>>
>>
>> 2013/10/11 Adri=E0 Mercader <adria.mercader at okfn.org>
>>
>>> Hi Vitor,
>>>
>>> I've never use the spatial extension on RHEL so not sure what might be
>>> wrong. Have you tried running a command on paster (not via Apache)?
>>>
>>> Something like this on your virtualenv for instance:
>>>
>>> (pyenv) $ paster --plugin=3Dckanext-spatial spatial initdb
>>> --config=3D/etc/ckan/default.ini
>>>
>>> Perhaps that gives us more clues
>>>
>>> Adri=E0
>>>
>>> On 11 October 2013 00:09, Vitor Baptista <vitor at vitorbaptista.com>
>>> wrote:
>>> > Hi all,
>>> >
>>> > I'm trying to install ckanext-spatial on a RHEL6, but I'm getting som=
e
>>> > strange errors.
>>> >
>>> > I was able to configure PostGIS and it seems to be working fine on th=
e
>>> DB
>>> > server. I've also installed ckanext-spatial and all of its
>>> dependencies on
>>> > the app server just fine, but whenever I add spatial_metadata or
>>> > spatial_query to the plugins list, I get:
>>> >
>>> >> =3D=3D> /var/log/httpd/ckan_default.error.log <=3D=3D
>>> >> [Fri Oct 11 00:00:02 2013] [error]
>>> >> /usr/lib/python2.6/site-packages/tw/core/view.py:223:
>>> DeprecationWarning:
>>> >> object.__new__() takes no parameters
>>> >> [Fri Oct 11 00:00:02 2013] [error] obj =3D object.__new__(cls, *ar=
gs,
>>> >> **kw)
>>> >> [Fri Oct 11 00:00:03 2013] [error] [client 187.114.201.223] Prematur=
e
>>> end
>>> >> of script headers: apache.wsgi
>>> >
>>> >
>>> >> =3D=3D> /var/log/httpd/error_log <=3D=3D
>>> >> [Fri Oct 11 00:00:04 2013] [notice] child pid 4135 exit signal
>>> >> Segmentation fault (11)
>>> >
>>> >
>>> > Googling around, it seems that it happens when somehow Apache is
>>> running one
>>> > version of a library, and your Python code is running another. I trie=
d
>>> > looking for possible culprits, but couldn't find any. The closest I
>>> thought
>>> > was geos that, as I installed this version:
>>> >
>>> >> geos.x86_64 3.3.2-1.el6 @epel
>>> >
>>> >
>>> > Running just geojson_preview works fine.
>>> >
>>> > Any ideas?
>>> >
>>> > Cheers,
>>> >
>>> > --
>>> >
>>> > V=EDtor Baptista
>>> >
>>> > Developer | http://vitorbaptista.com | LinkedIn | @vitorbaptista
>>> >
>>> > The Open Knowledge Foundation
>>> >
>>> > Empowering through Open Knowledge
>>> >
>>> > http://okfn.org/ | @okfn | OKF on Facebook | Blog | Newslette=
r
>>> >
>>> >
>>> > _______________________________________________
>>> > ckan-dev mailing list
>>> > ckan-dev at lists.okfn.org
>>> > http://lists.okfn.org/mailman/listinfo/ckan-dev
>>> > Unsubscribe: http://lists.okfn.org/mailman/options/ckan-dev
>>> >
>>>
>>> _______________________________________________
>>> ckan-dev mailing list
>>> ckan-dev at lists.okfn.org
>>> http://lists.okfn.org/mailman/listinfo/ckan-dev
>>> Unsubscribe: http://lists.okfn.org/mailman/options/ckan-dev
>>>
>>
>>
>>
>> --
>>
>> V=EDtor Baptista
>>
>> Developer | http://vitorbaptista.com | LinkedIn<http://www.linkedin.co=
m/in/vitorbaptista>|
>> @vitorbaptista <http://twitter.com/vitorbaptista>
>>
>> The Open Knowledge Foundation <http://okfn.org>
>>
>> *Empowering through Open Knowledge*
>>
>> http://okfn.org/ | @okfn <http://twitter.com/okfn> | OKF on Facebook=
<https://www.facebook.com/OKFNetwork> |
>> Blog <http://blog.okfn.org/> | Newsletter<http://okfn.org/about/newsle=
tter/>
>>
>>
>
>
> --
>
> V=EDtor Baptista
>
> Developer | http://vitorbaptista.com | LinkedIn<http://www.linkedin.com=
/in/vitorbaptista>|
> @vitorbaptista <http://twitter.com/vitorbaptista>
>
> The Open Knowledge Foundation <http://okfn.org>
>
> *Empowering through Open Knowledge*
>
> http://okfn.org/ | @okfn <http://twitter.com/okfn> | OKF on Facebook<=
https://www.facebook.com/OKFNetwork> |
> Blog <http://blog.okfn.org/> | Newsletter<http://okfn.org/about/newslet=
ter/>
>
>
--=20
V=EDtor Baptista
Developer | http://vitorbaptista.com |
LinkedIn<http://www.linkedin.com/in/vitorbaptista>|
@vitorbaptista <http://twitter.com/vitorbaptista>
The Open Knowledge Foundation <http://okfn.org>
*Empowering through Open Knowledge*
http://okfn.org/ | @okfn <http://twitter.com/okfn> | OKF on
Facebook<https://www.facebook.com/OKFNetwork> |
Blog <http://blog.okfn.org/> | Newsletter<http://okfn.org/about/newslette=
r/>
--047d7bdc11729d878d04e906688e
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Hi,<div><br></div><div>Answering myself, in case someone e=
lse arrives here with the same problem. To fix the issue, I used "seal=
ert" from the "setroubleshoot" package. It parses SELinux=
9;s audit.log, and explains what's going on, and what you should do if =
you want to allow something that was denied.</div>
<div><br></div><div>From that, I figured out that I needed to allow "h=
ttpd_execmem" using "setsebool -P=A0httpd_execmem 1".</div><=
div><br></div><div>Now everything is working fine.</div><div><br></div><div=
>
Cheers!</div></div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_q=
uote">2013/10/17 Vitor Baptista <span dir=3D"ltr"><<a href=3D"mailto:vit=
or at vitorbaptista.com" target=3D"_blank">vitor at vitorbaptista.com</a>></sp=
an><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div dir=3D"ltr">Hi,<div><br></div><div>I fi=
gured out that SELinux is the culprit. If I disable it, everything goes on =
fine. I tried following the instructions at=A0<a href=3D"https://github.com=
/okfn/ckan/wiki/How-to-Install-CKAN-2.0-on-CentOS-6.3#adjust-the-selinux-fi=
le-contexts" target=3D"_blank">https://github.com/okfn/ckan/wiki/How-to-Ins=
tall-CKAN-2.0-on-CentOS-6.3#adjust-the-selinux-file-contexts</a>, but that =
didn't work.</div>
<div><br></div><div>Looking at dmesg, I got:</div><div><br></div><div><bloc=
kquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-=
width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;paddin=
g-left:1ex">
type=3D1400 audit(1382056990.260:30750): avc: =A0denied =A0{ execmem } for =
=A0pid=3D13011 comm=3D"httpd" scontext=3Dunconfined_u:system_r:ht=
tpd_t:s0 tcontext=3Dunconfined_u:system_r:httpd_t:s0 tclass=3Dprocess<br>ht=
tpd[13011] general protection ip:7fb21cca3bbd sp:7fb229fd4320 error:0 in _c=
types.so[7fb21cc95000+1a000]</blockquote>
</div><div><br></div><div>So there was an execmem that was denied. But what=
now? How to give httpd permissions?</div><div><br></div><div>Cheers,</div>=
</div><div class=3D"HOEnZb"><div class=3D"h5"><div class=3D"gmail_extra"><b=
r>
<br><div class=3D"gmail_quote">2013/10/11 Vitor Baptista <span dir=3D"ltr">=
<<a href=3D"mailto:vitor at vitorbaptista.com" target=3D"_blank">vitor at vito=
rbaptista.com</a>></span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div dir=3D"ltr">Hi Adri=E0,<div><br></div><=
div>That runs without problems, and if I'm able to run the server with =
paster as well, so the extension should be installed correctly. It's on=
ly when I try with Apache that I get that error.</div>
<div><br></div><div>Do you have any other ideas of the possible culprit?</d=
iv><div><br></div><div>Cheers,</div></div><div><div><div class=3D"gmail_ext=
ra"><br><br><div class=3D"gmail_quote">2013/10/11 Adri=E0 Mercader <span di=
r=3D"ltr"><<a href=3D"mailto:adria.mercader at okfn.org" target=3D"_blank">=
adria.mercader at okfn.org</a>></span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">Hi Vitor,<br>
<br>
I've never use the spatial extension on RHEL so not sure what might be<=
br>
wrong. Have you tried running a command on paster (not via Apache)?<br>
<br>
Something like this on your virtualenv for instance:<br>
<br>
(pyenv) $ paster --plugin=3Dckanext-spatial spatial initdb<br>
--config=3D/etc/ckan/default.ini<br>
<br>
Perhaps that gives us more clues<br>
<br>
Adri=E0<br>
<div><div><br>
On 11 October 2013 00:09, Vitor Baptista <<a href=3D"mailto:vitor at vitorb=
aptista.com" target=3D"_blank">vitor at vitorbaptista.com</a>> wrote:<br>
> Hi all,<br>
><br>
> I'm trying to install ckanext-spatial on a RHEL6, but I'm gett=
ing some<br>
> strange errors.<br>
><br>
> I was able to configure PostGIS and it seems to be working fine on the=
DB<br>
> server. I've also installed ckanext-spatial and all of its depende=
ncies on<br>
> the app server just fine, but whenever I add spatial_metadata or<br>
> spatial_query to the plugins list, I get:<br>
><br>
>> =3D=3D> /var/log/httpd/ckan_default.error.log <=3D=3D<br>
>> [Fri Oct 11 00:00:02 2013] [error]<br>
>> /usr/lib/python2.6/site-packages/tw/core/view.py:223: DeprecationW=
arning:<br>
>> object.__new__() takes no parameters<br>
>> [Fri Oct 11 00:00:02 2013] [error] =A0 obj =3D object.__new__(cls,=
*args,<br>
>> **kw)<br>
>> [Fri Oct 11 00:00:03 2013] [error] [client 187.114.201.223] Premat=
ure end<br>
>> of script headers: apache.wsgi<br>
><br>
><br>
>> =3D=3D> /var/log/httpd/error_log <=3D=3D<br>
>> [Fri Oct 11 00:00:04 2013] [notice] child pid 4135 exit signal<br>
>> Segmentation fault (11)<br>
><br>
><br>
> Googling around, it seems that it happens when somehow Apache is runni=
ng one<br>
> version of a library, and your Python code is running another. I tried=
<br>
> looking for possible culprits, but couldn't find any. The closest =
I thought<br>
> was geos that, as I installed this version:<br>
><br>
>> geos.x86_64 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A03.3.2-1=
.el6 =A0 =A0 =A0 =A0 =A0 =A0 @epel<br>
><br>
><br>
> Running just geojson_preview works fine.<br>
><br>
> Any ideas?<br>
><br>
> Cheers,<br>
><br>
> --<br>
><br>
> V=EDtor Baptista<br>
><br>
> Developer =A0| =A0<a href=3D"http://vitorbaptista.com" target=3D"_blan=
k">http://vitorbaptista.com</a> | LinkedIn | @vitorbaptista<br>
><br>
> The Open Knowledge Foundation<br>
><br>
> Empowering through Open Knowledge<br>
><br>
> <a href=3D"http://okfn.org/" target=3D"_blank">http://okfn.org/</a> =
=A0| =A0 at okfn =A0| =A0OKF on Facebook =A0| =A0Blog =A0| =A0Newsletter<br>
><br>
><br>
</div></div>> _______________________________________________<br>
> ckan-dev mailing list<br>
> <a href=3D"mailto:ckan-dev at lists.okfn.org" target=3D"_blank">ckan-dev@=
lists.okfn.org</a><br>
> <a href=3D"http://lists.okfn.org/mailman/listinfo/ckan-dev" target=3D"=
_blank">http://lists.okfn.org/mailman/listinfo/ckan-dev</a><br>
> Unsubscribe: <a href=3D"http://lists.okfn.org/mailman/options/ckan-dev=
" target=3D"_blank">http://lists.okfn.org/mailman/options/ckan-dev</a><br>
><br>
<br>
_______________________________________________<br>
ckan-dev mailing list<br>
<a href=3D"mailto:ckan-dev at lists.okfn.org" target=3D"_blank">ckan-dev at lists=
.okfn.org</a><br>
<a href=3D"http://lists.okfn.org/mailman/listinfo/ckan-dev" target=3D"_blan=
k">http://lists.okfn.org/mailman/listinfo/ckan-dev</a><br>
Unsubscribe: <a href=3D"http://lists.okfn.org/mailman/options/ckan-dev" tar=
get=3D"_blank">http://lists.okfn.org/mailman/options/ckan-dev</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div dir=3D"=
ltr"><p style=3D"margin-top:0pt;margin-bottom:0pt"></p><p style=3D"margin-t=
op:0pt;margin-bottom:0pt"><font color=3D"#000000" face=3D"arial, helvetica,=
sans-serif"><span style=3D"line-height:14px;white-space:pre-wrap">V=EDtor =
Baptista</span></font></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><span style=3D"line-height:14=
px;white-space:pre-wrap"><font face=3D"arial, helvetica, sans-serif"><font =
color=3D"#000000">Developer =A0|</font><font color=3D"#444444"> </font><fon=
t color=3D"#000001">=A0<a href=3D"http://vitorbaptista.com" style=3D"color:=
#434343" target=3D"_blank">http://vitorbaptista.com</a> | <a href=3D"http:/=
/www.linkedin.com/in/vitorbaptista" style=3D"color:#434343" target=3D"_blan=
k">LinkedIn</a> | <a href=3D"http://twitter.com/vitorbaptista" style=3D"col=
or:#434343" target=3D"_blank">@vitorbaptista</a></font></font></span></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=
=3D"arial, helvetica, sans-serif"><span style=3D"line-height:14px;white-spa=
ce:pre-wrap"><a href=3D"http://okfn.org" style=3D"color:#000001" target=3D"=
_blank">The Open Knowledge Foundation</a></span></font></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=
=3D"arial, helvetica, sans-serif"><span style=3D"line-height:14px;white-spa=
ce:pre-wrap"><i>Empowering through Open Knowledge</i></span></font></p><p s=
tyle=3D"margin-top:0pt;margin-bottom:0pt">
<font color=3D"#000000" face=3D"arial, helvetica, sans-serif"><span style=
=3D"line-height:14px;white-space:pre-wrap"><a href=3D"http://okfn.org/" sty=
le=3D"color:rgb(0,0,1)" target=3D"_blank">http://okfn.org/</a> =A0| =A0<a h=
ref=3D"http://twitter.com/okfn" style=3D"color:rgb(0,0,1)" target=3D"_blank=
">@okfn</a> =A0| =A0<a href=3D"https://www.facebook.com/OKFNetwork" style=
=3D"color:rgb(0,0,1)" target=3D"_blank">OKF on Facebook</a> =A0| =A0<a href=
=3D"http://blog.okfn.org/" style=3D"color:rgb(0,0,1)" target=3D"_blank">Blo=
g</a> =A0| =A0<a href=3D"http://okfn.org/about/newsletter/" style=3D"color:=
rgb(0,0,1)" target=3D"_blank">Newsletter</a></span></font></p>
<p></p></div>
</div>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
<div dir=3D"ltr"><p style=3D"margin-top:0pt;margin-bottom:0pt"></p><p style=
=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=3D"arial=
, helvetica, sans-serif"><span style=3D"line-height:14px;white-space:pre-wr=
ap">V=EDtor Baptista</span></font></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><span style=3D"line-height:14=
px;white-space:pre-wrap"><font face=3D"arial, helvetica, sans-serif"><font =
color=3D"#000000">Developer =A0|</font><font color=3D"#444444"> </font><fon=
t color=3D"#000001">=A0<a href=3D"http://vitorbaptista.com" style=3D"color:=
#434343" target=3D"_blank">http://vitorbaptista.com</a> | <a href=3D"http:/=
/www.linkedin.com/in/vitorbaptista" style=3D"color:#434343" target=3D"_blan=
k">LinkedIn</a> | <a href=3D"http://twitter.com/vitorbaptista" style=3D"col=
or:#434343" target=3D"_blank">@vitorbaptista</a></font></font></span></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=
=3D"arial, helvetica, sans-serif"><span style=3D"line-height:14px;white-spa=
ce:pre-wrap"><a href=3D"http://okfn.org" style=3D"color:#000001" target=3D"=
_blank">The Open Knowledge Foundation</a></span></font></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=
=3D"arial, helvetica, sans-serif"><span style=3D"line-height:14px;white-spa=
ce:pre-wrap"><i>Empowering through Open Knowledge</i></span></font></p><p s=
tyle=3D"margin-top:0pt;margin-bottom:0pt">
<font color=3D"#000000" face=3D"arial, helvetica, sans-serif"><span style=
=3D"line-height:14px;white-space:pre-wrap"><a href=3D"http://okfn.org/" sty=
le=3D"color:rgb(0,0,1)" target=3D"_blank">http://okfn.org/</a> =A0| =A0<a h=
ref=3D"http://twitter.com/okfn" style=3D"color:rgb(0,0,1)" target=3D"_blank=
">@okfn</a> =A0| =A0<a href=3D"https://www.facebook.com/OKFNetwork" style=
=3D"color:rgb(0,0,1)" target=3D"_blank">OKF on Facebook</a> =A0| =A0<a href=
=3D"http://blog.okfn.org/" style=3D"color:rgb(0,0,1)" target=3D"_blank">Blo=
g</a> =A0| =A0<a href=3D"http://okfn.org/about/newsletter/" style=3D"color:=
rgb(0,0,1)" target=3D"_blank">Newsletter</a></span></font></p>
<p></p></div>
</div>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
<div dir=3D"ltr"><p style=3D"margin-top:0pt;margin-bottom:0pt"></p><p style=
=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=3D"arial=
, helvetica, sans-serif"><span style=3D"line-height:14px;white-space:pre-wr=
ap">V=EDtor Baptista</span></font></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><span style=3D"line-height:14=
px;white-space:pre-wrap"><font face=3D"arial, helvetica, sans-serif"><font =
color=3D"#000000">Developer =A0|</font><font color=3D"#444444"> </font><fon=
t color=3D"#000001">=A0<a href=3D"http://vitorbaptista.com" style=3D"color:=
#434343" target=3D"_blank">http://vitorbaptista.com</a> | <a href=3D"http:/=
/www.linkedin.com/in/vitorbaptista" style=3D"color:#434343" target=3D"_blan=
k">LinkedIn</a> | <a href=3D"http://twitter.com/vitorbaptista" style=3D"col=
or:#434343" target=3D"_blank">@vitorbaptista</a></font></font></span></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=
=3D"arial, helvetica, sans-serif"><span style=3D"line-height:14px;white-spa=
ce:pre-wrap"><a href=3D"http://okfn.org" style=3D"color:#000001" target=3D"=
_blank">The Open Knowledge Foundation</a></span></font></p>
<p style=3D"margin-top:0pt;margin-bottom:0pt"><font color=3D"#000000" face=
=3D"arial, helvetica, sans-serif"><span style=3D"line-height:14px;white-spa=
ce:pre-wrap"><i>Empowering through Open Knowledge</i></span></font></p><p s=
tyle=3D"margin-top:0pt;margin-bottom:0pt">
<font color=3D"#000000" face=3D"arial, helvetica, sans-serif"><span style=
=3D"line-height:14px;white-space:pre-wrap"><a href=3D"http://okfn.org/" sty=
le=3D"color:rgb(0,0,1)" target=3D"_blank">http://okfn.org/</a> =A0| =A0<a h=
ref=3D"http://twitter.com/okfn" style=3D"color:rgb(0,0,1)" target=3D"_blank=
">@okfn</a> =A0| =A0<a href=3D"https://www.facebook.com/OKFNetwork" style=
=3D"color:rgb(0,0,1)" target=3D"_blank">OKF on Facebook</a> =A0| =A0<a href=
=3D"http://blog.okfn.org/" style=3D"color:rgb(0,0,1)" target=3D"_blank">Blo=
g</a> =A0| =A0<a href=3D"http://okfn.org/about/newsletter/" style=3D"color:=
rgb(0,0,1)" target=3D"_blank">Newsletter</a></span></font></p>
<p></p></div>
</div>
--047d7bdc11729d878d04e906688e--
More information about the ckan-dev
mailing list