On 10/2/18 10:49 AM, bruce wrote:
Hi.
Doing a test to install drupal8 on a fed/centos7 droplet (digitalocean).
Since I'm not trying to get into sysAdmin stuff yet, I (perhaps
stupidly) decided to disable systemd/selinux. (An article I'm
following said this was ok). I'm now running into an issue where I get
the following
sudo chcon -R -t httpd_sys_content_rw_t /var/www/html/drupal/sites/
chcon: can't apply partial context to unlabeled file ‘README.txt’
chcon: can't apply partial context to unlabeled file ‘default.services.yml’
chcon: can't apply partial context to unlabeled file ‘default.settings.php’
chcon: can't apply partial context to unlabeled file ‘settings.php’
chcon: can't apply partial context to unlabeled file ‘default’
chcon: can't apply partial context to unlabeled file ‘development.services.yml’
chcon: can't apply partial context to unlabeled file
‘example.settings.local.php’
chcon: can't apply partial context to unlabeled file ‘example.sites.php’
chcon: can't apply partial context to unlabeled file
‘/var/www/html/drupal/sites/’
Can I assume that this is due to selinux being disabled? And I can
therefore skip this step in the process??
Once I actually get the app up/working with everything "disabled" I'll
probably take a stab at getting things working with systemd/selinux
fully enabled.
If the files are currently unlabeled (which they are), then you have
to provide full context to label them properly (provide a user, a role
and a type--not just a type as you were doing). Something like:
sudo chcon -R -h unconfined_u:object_r:httpd_sys_content_rw_t
/var/www/html/drupal/sites/
or
sudo chcon -R -u unconfined_u -r object_r -t httpd_sys_content_rw_t
/var/www/html/drupal/sites/
should do it. If you installed Apache as part of your installation,
there should be files in /var/www/html that have the correct contexts.
Find one (via "ls -Z") and use it as a template for your chcon command:
sudo chcon -R --reference=</path/to/file/with/correct/context>
/var/www/html/drupal/sites/
And read up on selinux--especially for web servers. It can be a life
saver.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, AllDigital ricks(a)alldigital.com -
- AIM/Skype: therps2 ICQ: 226437340 Yahoo: origrps2 -
- -
- UNIX is actually quite user friendly. The problem is that it's -
- just very picky of who its friends are! -
----------------------------------------------------------------------