Varnish and gcc access
Hello All,
I have a cPanel instance where the client wants to run varnish, it is installed, running as varnish, we added varnish to the compiler group but it's still gets access denied for gcc. I even se the config to run as compiler as it's primary group and still access is denied, we have to change the permissions of /usr/bin/ld.bfd /usr/bin/gcc with chmod o+x in order to get it to run. So it's not properly setting it's GID, which is less than optimal. I just can't figure out why. I am hoping that someone has had experience with this and can point me in the right direction.
[~]# varnishd -V
varnishd (varnish-4.0.3 revision b8c4a34)
Copyright (c) 2006 Verdens Gang AS
Copyright (c) 2006-2014 Varnish Software AS
[~]# uname -a
Linux hostname-omitted 3.10.0-327.10.1.el7.x86_64 #1 SMP Tue Feb 16 17:03:50 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
-
My inability to edit this post in order to fix typo's has taught me a valuable lesson about proofreading before submitting. 0 -
TBH, I've faced the same issue and did 755 on gcc file, but I was working on a dedicated instance for just varnish which is nice :-D 0 -
Hello :) We do have an existing feature request that's open for Varnish support: Support Varnish While it won't help you to troubleshoot this issue, it's a good idea to vote for features like this if you feel official support is beneficial. In addition, I do see a plugin offered for Varnish at: cPanel App Catalog :: Varnish + Nginx for cPanel WHM You could send a message to the plugin developer to see if this is an issue that's addressed in their plugin. Thank you. 0 -
TBH, I've faced the same issue and did 755 on gcc file, but I was working on a dedicated instance for just varnish which is nice :-D
You will find that cPanel automatically changes these permissions and you have to keep changing them back.0 -
Hello :) We do have an existing feature request that's open for Varnish support: Support Varnish While it won't help you to troubleshoot this issue, it's a good idea to vote for features like this if you feel official support is beneficial. In addition, I do see a plugin offered for Varnish at: cPanel App Catalog :: Varnish + Nginx for cPanel WHM You could send a message to the plugin developer to see if this is an issue that's addressed in their plugin. Thank you.
Thanks for that, unfortunately this client thinks that $3 a month for an extra GB of RAM on their server is an insurmountable financial burden. So plugins that cost money will not work. I am likely going to modify the service startup script so that it changes permissions on the relevant files first.0 -
You will find that cPanel automatically changes these permissions and you have to keep changing them back.
You can chattr them to keep the permission as you want for example:chmod +x /usr/bin/gcc; chattr +i /usr/bin/gcc
then cpanel wont be able to revert it back ;)0
Please sign in to leave a comment.
Comments
6 comments