{"id":4842,"date":"2008-12-22T14:19:57","date_gmt":"2008-12-22T11:19:57","guid":{"rendered":"http:\/\/blog.fedoramd.org\/?p=4842"},"modified":"2009-01-05T14:35:03","modified_gmt":"2009-01-05T11:35:03","slug":"ro-fedoramd-server-software-upgrade-part-deux","status":"publish","type":"post","link":"https:\/\/www.fedora.md\/ro\/2008\/12\/22\/ro-fedoramd-server-software-upgrade-part-deux\/","title":{"rendered":"FedoraMD server software upgrade &#8211; part deux"},"content":{"rendered":"<p>Recent serverul nostru <a href=\"http:\/\/blog.fedoramd.org\/ro\/2008\/12\/10\/fedoramd-server-software-upgrade\/\">a suferit un upgrade<\/a>. Ca orice sistem ce lucreaz\u0103 de ceva timp, al nostru nu mai poate fi considerat nici \"curat\", nici \"proasp\u0103t\" - avem \u0219i soft instalat f\u0103r\u0103 utilizare pachete, avem \u0219i modific\u0103ri \u00een structura si logica listelor de access, fi\u0219ierelor de configura\u021bie. Nu este de mirare c\u0103 dupa restart, nu chiar toate serviciile au lucrat \u00een mod normal. Despre unele am povestit \u00een primul post.<br \/>\n<!--more--><\/p>\n<p>Dup\u0103 instalare <strong>exim-mysql<\/strong>, livrarea po\u0219tei tot nu lucra. Ba chiar serviciul nu putea fi repornit - mesajul de eroare suna:<em> \/bin\/bash is not valid shell<\/em>. Cu-n ochi privesc \u00een <em>\/var\/log\/audit\/audit.log<\/em> - \u0219i evident SELinux denials. Trec <strong>SELinux<\/strong> \u00een mod permisiv - <em>setenforce 0<\/em> - \u0219i restabilesc rapid serviciile.<br \/>\nTotu\u0219i nu puteam s\u0103 las lucrurile balt\u0103. La upgrade am memorat mesaj relatat:<\/p>\n<pre>libsepol.scope_copy_callback: fastcgi: Duplicate declaration in module: type\/attribute httpd_fastcgi_script_t\r\nlibsemanage.semanage_link_sandbox: Link packages failed\r\nsemodule:\u00a0 Failed!<\/pre>\n<p>\u00cemi amintesc c\u0103 recent politica pentru <em>fastcgi<\/em> a fost integrat\u0103 \u00een pachet politici de baz\u0103. Deci solu\u021bia:<\/p>\n<pre>semodule -r fastcgi<\/pre>\n<p>\u0218i pentru a evita alte incertitudini - reconstruim \u0219i re\u00eenc\u0103rc\u0103m politica:<\/p>\n<pre>semodule -B<\/pre>\n<p>Totu\u0219i problema cu restartare servicii, \u0219i <em>exim<\/em> a r\u0103mas. \u00cen aceste cazuri se recomand\u0103 restabilirea contextelor pe toate sisteme de fi\u0219iere. Se lanseaz\u0103 dup\u0103 restartare cu comenzi:<\/p>\n<pre>touch \/.autorelabel\r\nreboot<\/pre>\n<p>Pentru noi aceasta nu a cea mai potrivit\u0103 solu\u021bie - serverul trebuie s\u0103 lucreze, dar restabilirea contextelor pe toate sisteme de fi\u0219iere e o opera\u021bie de durat\u0103. \u00cen schimb exist\u0103 metode semi automatizate. Pentru verificarea existen\u021bei contextelor incorecte lansez:<\/p>\n<pre>restorecon -r -n -v \/director<\/pre>\n<p>\u0219i dup\u0103 revizuire rezultatului comenzii \u0219i la necesitate le restabilim:<\/p>\n<pre>restorecon -r -v \/director<\/pre>\n<p>Directorul cu pricina \u00een cazul nostru a fost <em>\/root <\/em>(dar mai t\u00eerziu s-au dovedit a fi schimb\u0103ri \u0219i \u00een <em>\/var<\/em>).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recent serverul nostru a suferit un upgrade. Ca orice sistem ce lucreaz\u0103 de ceva timp, al nostru nu mai poate fi considerat nici &#8222;curat&#8221;, nici &#8222;proasp\u0103t&#8221; &#8211; avem \u0219i soft instalat f\u0103r\u0103 utilizare pachete, avem \u0219i modific\u0103ri \u00een structura si logica listelor de access, fi\u0219ierelor de configura\u021bie. Nu este de mirare c\u0103 dupa restart, nu [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1,239],"tags":[223,7,241],"_links":{"self":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts\/4842"}],"collection":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/comments?post=4842"}],"version-history":[{"count":6,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts\/4842\/revisions"}],"predecessor-version":[{"id":4868,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/posts\/4842\/revisions\/4868"}],"wp:attachment":[{"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/media?parent=4842"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/categories?post=4842"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fedora.md\/wp-json\/wp\/v2\/tags?post=4842"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}