Unexpected permission denied
I am having trouble with php8.1-fpm commanded from nginx on a bullseye
system
php8.1-fpm reports access denied when opening a specific file for the
application. The file has universal rwx permissions (after attempting to
fix problem). I am not running selinux but I do see some references to
apparmor in the logs.
This is the relevant part of the strace
0.000000 accept(10, {sa_family=AF_UNIX}, [112->2]) = 5
6.306001 poll([{fd=5, events=POLLIN}], 1, 5000) = 1 ([{fd=5, revents=POLLIN}])
0.000050 times({tms_utime=1, tms_stime=0, tms_cutime=0, tms_cstime=0}) = 1736216570
0.000029 read(5, "\1\1\0\1\0\10\0\0", 8) = 8
0.000024 read(5, "\0\1\0\0\0\0\0\0", 8) = 8
0.000020 read(5, "\1\4\0\1\5\304\4\0", 8) = 8
0.000017 read(5, "\f\0QUERY_STRING\16\3REQUEST_METHODGE"..., 1480) = 1480
0.000021 read(5, "\1\4\0\1\0\0\0\0", 8) = 8
0.000060 lstat("/var/www/grammartiste.com/web/index.php", {st_mode=S_IFREG|0755, st_size=549, ...}) = 0
0.000040 lstat("/var/www/grammartiste.com/web", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
0.000024 lstat("/var/www/grammartiste.com", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
0.000021 lstat("/var/www", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
0.000020 lstat("/var", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
0.000070 stat("/var/www/grammartiste.com/web/.user.ini", 0x7fffdc584000) = -1 ENOENT (No such file or directory)
0.000119 rt_sigaction(SIGPROF, NULL, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, 8) = 0
0.000036 rt_sigaction(SIGHUP, NULL, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, 8) = 0
0.000022 rt_sigaction(SIGINT, NULL, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, 8) = 0
0.000020 rt_sigaction(SIGQUIT, NULL, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, 8) = 0
0.000019 rt_sigaction(SIGTERM, NULL, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, 8) = 0
0.000019 rt_sigaction(SIGUSR1, NULL, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, 8) = 0
0.000019 rt_sigaction(SIGUSR2, NULL, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, 8) = 0
0.000020 setitimer(ITIMER_PROF, {it_interval={tv_sec=0, tv_usec=0}, it_value={tv_sec=60, tv_usec=0}}, NULL) = 0
0.000020 rt_sigaction(SIGPROF, {sa_handler=0x55d9525d9fb0, sa_mask=~[ILL TRAP ABRT BUS FPE KILL SEGV CONT STOP TSTP TTIN TTOU SYS RTMIN RT_1], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc72ecdbd60}, NULL, 8) = 0
0.000018 rt_sigprocmask(SIG_UNBLOCK, [PROF], NULL, 8) = 0
0.000118 getcwd("/", 4095) = 2
0.000020 chdir("/var/www/grammartiste.com/web") = 0
0.000041 setitimer(ITIMER_PROF, {it_interval={tv_sec=0, tv_usec=0}, it_value={tv_sec=30, tv_usec=0}}, NULL) = 0
0.000019 fcntl(3, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=1, l_len=1}) = 0
0.000029 stat("/var/www/grammartiste.com/web/index.php", {st_mode=S_IFREG|0755, st_size=549, ...}) = 0
0.000034 getcwd("/var/www/grammartiste.com/web", 4096) = 30
0.000030 stat("/var/www/grammartiste.com/web/autoload.php", {st_mode=S_IFREG|0755, st_size=312, ...}) = 0
0.000041 lstat("/var/www/grammartiste.com/web/vendor/autoload.php", 0x7fffdc580970) = -1 EACCES (Permission denied)
0.000034 lstat("/var/www/grammartiste.com/web/vendor/autoload.php", 0x7fffdc57f900) = -1 EACCES (Permission denied)
0.000021 lstat("/var/www/grammartiste.com/web/vendor", {st_mode=S_IFDIR|0666, st_size=4096, ...}) = 0
0.000021 openat(AT_FDCWD, "/var/www/grammartiste.com/web/vendor/autoload.php", O_RDONLY) = -1 EACCES (Permission denied)
0.000067 write(2, "NOTICE: sapi_cgi_log_message(), "..., 227) = 227
0.000056 write(2, "NOTICE: sapi_cgi_log_message(), "..., 400) = 400
0.000022 chdir("/") = 0
0.000019 times({tms_utime=1, tms_stime=0, tms_cutime=0, tms_cstime=0}) = 1736216571
0.000022 setitimer(ITIMER_PROF, {it_interval={tv_sec=0, tv_usec=0}, it_value={tv_sec=0, tv_usec=0}}, NULL) = 0
0.000039 fcntl(3, F_SETLK, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
0.000024 write(5, "\1\7\0\1\2\35\3\0PHP message: PHP Warning"..., 656) = 656
0.000108 shutdown(5, SHUT_WR) = 0
0.000154 recvfrom(5, "\1\5\0\1\0\0\0\0", 8, 0, NULL, NULL) = 8
0.000083 recvfrom(5, "", 8, 0, NULL, NULL) = 0
0.000020 close(5) = 0
0.000026 write(2, "\0fscf\0", 6) = 6
0.000021 accept(10, strace: Process 89852 detached
root@gram01:~/trc# ls -l /var/www/grammartiste.com/web/vendor/autoload.php
-rwxrwxrwx 1 www-data www-data 771 Jan 24 13:00 /var/www/grammartiste.com/web/vendor/autoload.php
--
Jeremy
Reply to: