setfacl permissions set on a file to an user, but he's unable to execute!

Question

I setup setfacl permission to a user, by doing

setfacl -m u:user:rx ../../../apache2/bin/restart

Giving user access to run the restart script.

but at the user end, he's unable to execute the restart script-

./apache2/bin/restart 
sh: line 0: kill: (346) - Operation not permitted
sh: line 0: kill: (349) - Operation not permitted
sh: line 0: kill: (353) - Operation not permitted
sh: line 0: kill: (357) - Operation not permitted
(98)Address already in use: make_sock: could not bind to address [::]:15552
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:15552
no listening sockets available, shutting down
Unable to open logs

Answer 1

0

This is because the processes are run as your primary account user. They can not be restarted by a secondary user.

permanent link

answered 17 Dec '12, 13:33

bmeyer71 ♦♦
1.5k●3●6●13
accept rate: 33%

is there any workaround to fix this? everytime i have to restart the apache process. Doesn't make much sense.

(17 Dec '12, 13:40) Prajwal

There is no work around. Only root can kill processes started by another user. This is part of the security model of the OS.

(17 Dec '12, 14:54) bmeyer71 ♦♦

Answer 2

0	http://community.webfaction.com/questions/6213/how-can-i-let-another-user-restart-my-django-apps-apache-server Solved. ;) permanent link answered 22 Dec '12, 07:45 Prajwal 106●1●18●30 accept rate: 33%

setfacl permissions set on a file to an user, but he's unable to execute!

Follow this question

Related questions