Hi,

> Hello,
> Leonard Bottleman a écrit :
> > I have spent a fun couple of hours trying to resolve issues with the CGI
> > interface to BackupPC and selinux permissions.
> >
> > I know some of these issues have been discussed here before, but I thought
> > what I've experienced thus far to see if others have a solution.
> >
> > The system is running Fedora Core 6, with selinux enabled.
> >   
> As for me, I have no problem with SELinux and BackupPC 3.0.0 (there were
> some issues with the oldest ones)
> > The first hurdle was the well known
> >
> >    Error: Unable to read config.pl or language strings!!
> >
> > The problem was that the backup directory where the configuration
> > files are located needed to have the correct permissions for a
> > cgi script to access.
> >
> >    # chcon -R -t httpd_sys_script_rw_t <path to backup directory>
> >
> > After fixing this permission issue I reached the next roadblock
> > of the script being unable to connect to the BackupPC server.
> >
> > The server was up and running as the backuppc user, and the cgi-script
> > was being executed as the backuppc user. Checking the system error log
> > I saw that selinux had denied the script "connectto" access, even though
> > I had enabled httpd network connections for selinux (and squirrelmail is
> > able to connect to dovecot, which I assume requires the same permission).
> >
> > I know this is an selinux issue, and if I disable selinux for just the
> > BackupPC_Admin script, I can connect:
> >
> >    # chcon -t httpd_unconfined_script_exec_t BackupPC_Admin
> >
> > In a perfect world I'd like to keep selinux enabled for this script, but
> > thus far I've not been able to find the steps to grant connect access
> > for the script to the server. Any thoughts from the more experienced
> > selinux savvy?
> >
> > Once connected I was able to start and monitor backups (I'm using tar,
> > because configuring rsync yielded
> >
> >    File::RsyncP module doesn't exist
> >   
> Is this package installed on your system :
> perl-File-RsyncP
> 
> By the way, the version actually shipped on the Fedora repositories 
> is not compatible with BackupPC 3.0.0, I've requested an upgrade. If 
> you wish to use BackupPC 3.0 on your Fedora Core, let me know, I'll 
> put the package I've rebuild on my webserver

I use the version supplied by rpmforge and it works fine:

http://dag.wieers.com/rpm/packages/perl-File-RsyncP/

Just put rpmforge into your yum config and get notified of updates.

Regards,

Michael.


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
BackupPC-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/

Reply via email to