<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Times;
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-fareast-language:EN-GB;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.gmail-m-8057779345819458381apple-converted-space
{mso-style-name:gmail-m_-8057779345819458381apple-converted-space;}
span.gmail-m-8057779345819458381gmail-m-3633912640909317664apple-converted-space
{mso-style-name:gmail-m_-8057779345819458381gmail-m_-3633912640909317664apple-converted-space;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Verdana",sans-serif;
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Verdana",sans-serif;
color:#1F497D;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Thanks for this fix Mansur, I have added it to the sysadmin manual.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US">best<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Andrew.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> <a href="mailto:cwb-bounces@sslmit.unibo.it">
cwb-bounces@sslmit.unibo.it</a> <<a href="mailto:cwb-bounces@sslmit.unibo.it">cwb-bounces@sslmit.unibo.it</a>>
<b>On Behalf Of </b>mansur<br>
<b>Sent:</b> 26 January 2019 13:33<br>
<b>To:</b> Open source development of the Corpus WorkBench <<a href="mailto:cwb@sslmit.unibo.it">cwb@sslmit.unibo.it</a>><br>
<b>Subject:</b> Re: [CWB] File access permission check failed<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Hi, Chao!<br>
<br>
Great! Make sure you don't leave SELinux disabled, it is a bad solution. Something like this should help you to configure SELinux properly:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">1) Add rule for that directory:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">semanage fcontext -a -t httpd_sys_rw_content_t "/opt/CQPData(/.*)?"<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">2) Apply that rule:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">restorecon -R -v /opt/CQPData<br>
<br>
If you don't have semanage installed, then:<br>
yum install -y policycoreutils-python<br>
<br>
With best wishes,<br>
Mansur<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Am Sa., 26. Jan. 2019 um 16:11 Uhr schrieb Chao Sun <<a href="mailto:chao.sun@sydney.edu.au">chao.sun@sydney.edu.au</a>>:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#004479">Hi Mansur,</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479">Thank you very much, you are a gem! </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479">This is exactly the case and I didn’t realise there’s such thing exist in RH enterprise (used Ubuntu/Arch in the past).</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479">I have temporarily disabled SELinux and all problem solved. Upload area is viewable and upload seems to be fine.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479">Can’t believe how much time I wasted on this issue. If you didn’t point it out I might get stuck there forever.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#004479">Best Regards,</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#004479">Chao</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:black">Dr<span class="gmail-m-8057779345819458381apple-converted-space"> </span>CHAO<span class="gmail-m-8057779345819458381apple-converted-space"> </span>SUN </span></b><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:black">|<span class="gmail-m-8057779345819458381apple-converted-space"> </span>Data
Scientist <br>
</span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:#424242">Faculty of Arts and Social Sciences |<b> The University of Sydney</b><br>
Rm N302 off Lobby J, Quadrangle A14 | The University of Sydney | NSW | 2006</span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
<b>T</b></span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:#424242"> +61 2 9351 4240<span class="gmail-m-8057779345819458381apple-converted-space"> </span> | <b>F</b> +61 2 9351 5333</span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
<b>E</b></span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:#424242"> <a href="mailto:chao.sun@sydney.edu.au" target="_blank">chao.sun@sydney.edu.au</a> | <b>W</b> <a href="http://sydney.edu.au" target="_blank">sydney.edu.au</a></span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
</span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:#797979">CRICOS 00026A</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On 26 Jan 2019, at 10:23 pm, mansur <<a href="mailto:6688000@gmail.com" target="_blank">6688000@gmail.com</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<p class="MsoNormal">Hello, Chao!<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Do you have SELinux enabled? If yes, try to check its permissions...<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">With best wishes,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Mansur<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Am Sa., 26. Jan. 2019 um 06:04 Uhr schrieb Chao Sun <<a href="mailto:chao.sun@sydney.edu.au" target="_blank">chao.sun@sydney.edu.au</a>>:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#004479">Hello,</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#004479">I am recently rebuilding a CQPweb server on </span><span style="color:#004479">Redhat and hit on this problem that I have never met in the past.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479">When I try to upload .vrt files, I got this error message:
</span><o:p></o:p></p>
</div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-family:Times">ERROR: CWB registry dir ``/opt/CQPData/reg'' seems not to exist, or is not readable!</span><o:p></o:p></p>
</blockquote>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:Times">I then run the system diagnosis from the admin page, and in order to be certain on the username that the script is running under (I know it’s apache under RH and www-data under Ubuntu), I
have added “.exec(‘whoami’)’ to the end of the check script in cqp.inc.php. </span>
<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="color:#004479">if (!is_readable($cwb_registry))<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479"> {<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479"> $infoblob .= "$EOL CHECK FAILED. Ensure that $cwb_registry"<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479"> . " is readable by the username this script is running under.$EOL".<b>exec('whoami')</b>;<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479"> break;<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479"> }<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479"> else<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#004479"> $infoblob .= " yes it is!$EOL$EOL";<o:p></o:p></span></p>
</div>
</blockquote>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Times">And the output confirmed the user of php script is apache.</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<pre><span style="font-family:"Helvetica",sans-serif">Checking that CWB registry is readable by this user... CHECK FAILED. Ensure that /opt/CQPData/reg is readable by the username this script is running under. <b>apache</b><o:p></o:p></span></pre>
</blockquote>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">The problem is that before doing this check, I have already set the file/directory permissions to the target directories.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">I then added user apache to the group mysql, added user mysql to the group apache. Then changed apache:apache as the directory owner, and even set the permission on all directory
to 777 recursively.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">None of the above file permissions solve the problem, and the directory /opt/CQPData/reg is always unreadable to CQPWeb.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">The permission settings to the directories are as following at the moment:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">/opt/CQPData<o:p></o:p></span></p>
</div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">drwxrwxr-x. 7 apache apache 70 Jan 19 13:05 CQPData<o:p></o:p></p>
</blockquote>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Sub directories:<o:p></o:p></p>
</div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">drwxrwxr-x. 2 apache apache 6 Jan 19 13:04 cache<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">drwxrwxr-x. 2 apache apache 6 Jan 19 13:04 data<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">drwxrwxr-x. 2 mysql apache 6 Jan 19 13:04 mysql<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">drwxrwxrwx. 2 apache apache 6 Jan 26 13:14 reg<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">drwxrwxr-x. 2 apache apache 100 Jan 26 12:45 uploads<o:p></o:p></p>
</div>
</blockquote>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">The registry directory is open to everyone, needless to say to the owner user and group.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">I don’t think this is related to the MySQL settings though, but reset all the options as instructed in the admin manual to grant privileges etc.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">Please help on debugging this issue. Thanks in advance!<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#004479">Regards,</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#004479">Chao</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif">Dr<span class="gmail-m-8057779345819458381gmail-m-3633912640909317664apple-converted-space"> </span>CHAO<span class="gmail-m-8057779345819458381gmail-m-3633912640909317664apple-converted-space"> </span>SUN </span></b><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif">|<span class="gmail-m-8057779345819458381gmail-m-3633912640909317664apple-converted-space"> </span>Data
Scientist <br>
<span style="color:#424242">Faculty of Arts and Social Sciences |<b> The University of Sydney</b><br>
Rm N302 off Lobby J, Quadrangle A14 | The University of Sydney | NSW | 2006</span><br>
<b>T</b><span style="color:#424242"> +61 2 9351 4240<span class="gmail-m-8057779345819458381gmail-m-3633912640909317664apple-converted-space"> </span> | <b>F</b> +61 2 9351 5333</span><br>
<b>E</b><span style="color:#424242"> <a href="mailto:chao.sun@sydney.edu.au" target="_blank">chao.sun@sydney.edu.au</a> | <b>W</b> <a href="http://sydney.edu.au/" target="_blank">sydney.edu.au</a></span><br>
<span style="color:#797979">CRICOS 00026A</span></span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">_______________________________________________<br>
CWB mailing list<br>
<a href="mailto:CWB@sslmit.unibo.it" target="_blank">CWB@sslmit.unibo.it</a><br>
<a href="https://protect-au.mimecast.com/s/_BdvC6X13RtLO22vCp1v5b?domain=liste.sslmit.unibo.it" target="_blank">http://liste.sslmit.unibo.it/mailman/listinfo/cwb</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal">_______________________________________________<br>
CWB mailing list<br>
<a href="mailto:CWB@sslmit.unibo.it" target="_blank">CWB@sslmit.unibo.it</a><br>
<a href="https://protect-au.mimecast.com/s/_BdvC6X13RtLO22vCp1v5b?domain=liste.sslmit.unibo.it" target="_blank">https://protect-au.mimecast.com/s/_BdvC6X13RtLO22vCp1v5b?domain=liste.sslmit.unibo.it</a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">_______________________________________________<br>
CWB mailing list<br>
<a href="mailto:CWB@sslmit.unibo.it" target="_blank">CWB@sslmit.unibo.it</a><br>
<a href="http://liste.sslmit.unibo.it/mailman/listinfo/cwb" target="_blank">http://liste.sslmit.unibo.it/mailman/listinfo/cwb</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</body>
</html>