Centos 6 VPS + Cpanel Non privileged user cant use svn or dns

Portal Home > Knowledgebase > Articles Database > Centos 6 VPS + Cpanel Non privileged user cant use svn or dns

Posted by AndyOx, 03-05-2012, 06:32 PM
Hi, Brain failure here, sorry - I'm sure someone can help with this really quickly. I was going to install mod_pagespeed on my Centos 6 VPS running Cpanel/WHM 11.30 I was following the instructions here at "code.google.com/p/modpagespeed/wiki/HowToBuild" So, I thought I would create a non cpanel (non root too) user to do system compilation etc: useradd devman Ok, no problem there then as root install subversion yum install subversion Okay, so next "su - devman svn co src.chromium.org/svn/trunk/tools/depot_tools svn: OPTIONS of 'src.chromium.org/svn/trunk/tools/depot_tools': Could not resolve hostname `src.chromium.org': Host not found (src.chromium.org) ping src.chromium.org ping: icmp open socket: Operation not permitted ping bbc.co.uk ping: icmp open socket: Operation not permitted dig bbc.co.uk dig: dns_name_settotextfilter: out of memory dig chronium.org dig: dns_name_settotextfilter: out of memory" -- I had to remove the web url part from the above commands as I have posted < 5 posts and cant insert it yet But if I jump back to root - it all works, except I cant use the gclient as root - bad idea etc. So, I am assuming that on my Centos 6 + Cpanel/WHM non priviliged users can't use a lot of system commands, the svn one I am guessing is to do with not being able to use dns lookup (I also tried this with a cpanel created account - same result once I enabled shell access) So, is there a quick and easy way to create a 'development' user account that does not, for example involve adding a suid bit to all the necessary commands (however many they may be) that will let me use the svn client to grab remote repositories ? Thanks - like I said, brain failure at this really simple stumbling block, so thanks for any help . Cheers Andy
Posted by hostingxchange, 03-05-2012, 10:47 PM
Do you have SELinux enabled?
Posted by brianoz, 03-06-2012, 07:13 AM
firewall related?
Posted by AndyOx, 03-06-2012, 12:06 PM
Hi, Thanks for the replies. SELinux is set to permissive, so that should only nag in the logs right ? Firewall (csf) is set to allow outgoing traffic on tcp ports: 20,21,22,25,37,43,53,80,110,113,443,587,873,2087,2089,2703 Thanks Andy
Posted by AndyOx, 03-07-2012, 05:36 PM
Hi, I still have this issue - one further bit of interest If I try to use gcc as a regular cpanel user: gcc h.c -bash: /usr/bin/gcc: Permission denied As root: ls -l /usr/bin/gcc -rwxr-x---. 2 root compiler 268160 Dec 6 17:22 /usr/bin/gcc* So, obviously a regular cpanel user is out of luck with gcc unless they belong to the compiler group - I get that But svn is still -rwxr-xr-x. 1 root root ... So maybe there are system calls that svn uses that prevents a non privileged user as configured on this vps from running ? Cheers Andy