Hello Lorraine,

It is interesting. Thanks for your feedback. Internally to connect to
bconsole Bacularis does the same as this shell command does (adapted to
your problem):

# sudo -u apache sudo /opt/bacula/bin/bconsole

The 'sudo -u apache' switches user to 'apache' user to be the same user as
PHP user. Once we are the 'apache' user then the regular sudo command is
executed 'sudo /opt/bacula/bin/bconsole'.

If the above command will work, then Bacularis will work the same
automatically.

Could you show us the output from this command?

# sudo -u apache sudo -l

It will list allowed commands for the apache user. Thanks.

Good luck.

Best regards,
Marcin Haba (gani)

On Thu, 3 Aug 2023 at 01:47, Lorraine <lorra...@burgess-consulting.com.au>
wrote:

> Morning Marcin, Thank you for the update.
> I tried the alternate sudo entry but still had no luck.  I also set
> "SELINUX=disabled”  in /etc/selinux/config but nothing seems to get past
> this error.
> I will continue to troubleshoot and let you know if I find anything.
>
> Regards
> Lorraine
>
> On 3 Aug 2023, at 7:59 am, Marcin Haba <ganius...@gmail.com> wrote:
>
> Hello Lorraine,
>
> In your Bacularis sudoers file you use switching from apache user to
> bacula user. It is correct but unfortunately Bacularis does not support it.
> To work with this setting Bacularis needs to know about bacula user and use
> internally "sudo -u bacula" sudo parameter to let know sudo about target
> user.
>
> If you want you can omit the bacula user in sudo and then will be used the
> default target user which is root.
>
> Defaults:apache !requiretty
> apache ALL = NOPASSWD: /opt/bacula/bin/bconsole
>
> In the future we will add support for -u sudo parameter.
>
> Best regards,
> Marcin Haba (gani)
>
> On Wed, 2 Aug 2023 at 08:43, Lorraine <lorra...@burgess-consulting.com.au>
> wrote:
>
>> Hi, Yes I installed the following:
>>
>> [root@nbipbac12 bin]# yum list installed | grep bacularis-selinux
>> bacularis-selinux.noarch                           2.1.2-1.el8
>>                                       @bacularis-app
>>
>> Regards
>> Lorraine
>>
>>
>>
>>
>> On 2 Aug 2023, at 6:16 pm, Marcin Haba <ganius...@gmail.com> wrote:
>>
>> SELinux
>>
>>
>> Burgess Systems Consulting
>> e: lorra...@burgess-consulting.com.au
>> w: http://www.burgess-consulting.com.au
>> m: +64-21-988-950
>> ddi: +61 2 8077 4296
>> Suite 802, 210 Clarence St, Sydney 2000, NSW
>>
>>
>> <B43106387B154989A52220A9A0A592A3.jpeg>
>>
>>
>
> --
> "Greater love hath no man than this, that a man lay down his life for his
> friends." Jesus Christ
>
> "Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie za
> przyjaciół swoich." Jezus Chrystus
>
>
> Burgess Systems Consulting
> e: lorra...@burgess-consulting.com.au
> w: http://www.burgess-consulting.com.au
> m: +64-21-988-950
> ddi: +61 2 8077 4296
> Suite 802, 210 Clarence St, Sydney 2000, NSW
>
>
>
>

-- 
"Greater love hath no man than this, that a man lay down his life for his
friends." Jesus Christ

"Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie za
przyjaciół swoich." Jezus Chrystus
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to