webadmin-list — Webmin users mailing list

Re: [webmin-l] Apache2 down after package update

[Teknoskillz <tek...@co...>]

/ var / log / apache2

access.log , error.log and other_vhosts_access.log

all are 0 bytes in file size.


I found /etc/php/5.6/fpm/php.ini
 and took a peek at it to see if it defines a path to the error log, but 
could not find anything.
I didnt touch that file so I guess its ok.


==
Steve




----- Original Message ----- 
From: "Cecil Yother, Jr." <cj...@yo...>
To: "Teknoskillz" <tek...@co...>; "Webmin users list" 
<web...@li...>
Sent: Friday, April 28, 2017 11:25 PM
Subject: Re: [webmin-l] Apache2 down after package update


> Post the last 20 lines of the apache log file.
>
> On 04/28/2017 06:12 PM, Teknoskillz wrote:
>> Did the usual package updates today from Webmin, all went ok except when
>> upgrading Apache2. There was a timeout, and the service never restarted
>> during the upgrade process.
>>
>> I did a purge and remove via bash, and a reinstall , but still no go.
>>
>> =========================================================
>> Fri Apr 28 22:33:30 UTC 2017
>> ~# sudo apt-get --purge remove apache2
>> Reading package lists... Done
>> Building dependency tree
>> Reading state information... Done
>> The following packages were automatically installed and are no longer
>> required:
>>    apache2-data apache2-utils
>> Use 'sudo apt autoremove' to remove them.
>> The following packages will be REMOVED:
>>    apache2*
>> 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
>> After this operation, 514 kB disk space will be freed.
>> Do you want to continue? [Y/n] y
>> (Reading database ... 70372 files and directories currently installed.)
>> Removing apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
>> Purging configuration files for apache2 (2.4.25-3+deb.sury.org~xenial+1) 
>> ...
>> dpkg: warning: while removing apache2, directory '/var/www/html' not 
>> empty
>> so no
>> t removed
>> dpkg: warning: while removing apache2, directory
>> '/etc/apache2/sites-enabled' no
>> t empty so not removed
>> dpkg: warning: while removing apache2, directory 
>> '/etc/apache2/conf-enabled'
>> not
>>   empty so not removed
>> Processing triggers for man-db (2.7.5-1) ...
>> ~# sudo apt-get autoremove
>> Reading package lists... Done
>> Building dependency tree
>> Reading state information... Done
>> Job for apache2.service failed because the control process exited with 
>> error
>> cod
>> e. See "systemctl status apache2.service" and "journalctl -xe" for 
>> details.
>> invoke-rc.d: initscript apache2, action "start" failed.
>> ? apache2.service - LSB: Apache2 web server
>>     Loaded: loaded (/etc/init.d/apache2; enabled; vendor preset: enabled)
>>     Active: activating (auto-restart) (Result: exit-code) since Fri
>> 2017-04-28 22
>> :36:45 UTC; 6ms ago
>>       Docs: man:systemd-sysv-generator(8)
>>    Process: 22561 ExecStart=/etc/init.d/apache2 start (code=exited,
>> status=1/FAIL
>> URE)
>>
>> Apr 28 22:36:45 systemd[1]: apache2.service: Control
>> pr...
>> Apr 28 22:36:45 systemd[1]: Failed to start LSB:
>> Apache...
>> Apr 28 22:36:45 systemd[1]: apache2.service: Unit
>> enter...
>> Apr 28 22:36:45 systemd[1]: apache2.service: Failed
>> wit...
>> Hint: Some lines were ellipsized, use -l to show in full.
>> insserv: warning: current start runlevel(s) (empty) of script
>> `apache-htcachecle
>> an' overrides LSB defaults (2 3 4 5).
>> insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script
>> `apache-htc
>> acheclean' overrides LSB defaults (0 1 6).
>> Processing triggers for systemd (229-4ubuntu17) ...
>> Processing triggers for ureadahead (0.100.0-19) ...
>>
>> ======================================================================
>>
>> Im not sure if its because I enabled mod_rewrite and there is a new path 
>> or
>> something, but thats
>> the only change thata major I did with Apache after trying to get the 
>> sites
>> more SEO friendly recetly.
>> There may have been 1 other module enabled, but I cant remember what it 
>> was.
>> I went in and turned on rewrite
>> and we are still failing.  Any help or ideas out there?
>>
>>
>> ===
>> Steve
>>
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list at 
>> web...@li...
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
> -- 
>


--------------------------------------------------------------------------------


> Post the last 20 lines of the apache log file.
>
>
> On 04/28/2017 06:12 PM, Teknoskillz wrote:
>
> Did the usual package updates today from Webmin, all went ok except when
> upgrading Apache2. There was a timeout, and the service never restarted
> during the upgrade process.
>
> I did a purge and remove via bash, and a reinstall , but still no go.
>
> =========================================================
> Fri Apr 28 22:33:30 UTC 2017
> ~# sudo apt-get --purge remove apache2
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following packages were automatically installed and are no longer
> required:
>  apache2-data apache2-utils
> Use 'sudo apt autoremove' to remove them.
> The following packages will be REMOVED:
>  apache2*
> 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
> After this operation, 514 kB disk space will be freed.
> Do you want to continue? [Y/n] y
> (Reading database ... 70372 files and directories currently installed.)
> Removing apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> Purging configuration files for apache2 (2.4.25-3+deb.sury.org~xenial+1) 
> ...
> dpkg: warning: while removing apache2, directory '/var/www/html' not empty
> so no
> t removed
> dpkg: warning: while removing apache2, directory
> '/etc/apache2/sites-enabled' no
> t empty so not removed
> dpkg: warning: while removing apache2, directory 
> '/etc/apache2/conf-enabled'
> not
> empty so not removed
> Processing triggers for man-db (2.7.5-1) ...
> ~# sudo apt-get autoremove
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> Job for apache2.service failed because the control process exited with 
> error
> cod
> e. See "systemctl status apache2.service" and "journalctl -xe" for 
> details.
> invoke-rc.d: initscript apache2, action "start" failed.
> ? apache2.service - LSB: Apache2 web server
>   Loaded: loaded (/etc/init.d/apache2; enabled; vendor preset: enabled)
>   Active: activating (auto-restart) (Result: exit-code) since Fri
> 2017-04-28 22
> :36:45 UTC; 6ms ago
>     Docs: man:systemd-sysv-generator(8)
>  Process: 22561 ExecStart=/etc/init.d/apache2 start (code=exited,
> status=1/FAIL
> URE)
>
> Apr 28 22:36:45 systemd[1]: apache2.service: Control
> pr...
> Apr 28 22:36:45 systemd[1]: Failed to start LSB:
> Apache...
> Apr 28 22:36:45 systemd[1]: apache2.service: Unit
> enter...
> Apr 28 22:36:45 systemd[1]: apache2.service: Failed
> wit...
> Hint: Some lines were ellipsized, use -l to show in full.
> insserv: warning: current start runlevel(s) (empty) of script
> `apache-htcachecle
> an' overrides LSB defaults (2 3 4 5).
> insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script
> `apache-htc
> acheclean' overrides LSB defaults (0 1 6).
> Processing triggers for systemd (229-4ubuntu17) ...
> Processing triggers for ureadahead (0.100.0-19) ...
>
> ======================================================================
>
> Im not sure if its because I enabled mod_rewrite and there is a new path 
> or
> something, but thats
> the only change thata major I did with Apache after trying to get the 
> sites
> more SEO friendly recetly.
> There may have been 1 other module enabled, but I cant remember what it 
> was.
> I went in and turned on rewrite
> and we are still failing.  Any help or ideas out there?
>
>
> ===
> Steve
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at 
> web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
> -- 
> 

Re: [webmin-l] Apache2 down after package update

[Cecil Y. Jr. <cj...@yo...>]

Post the last 20 lines of the apache log file.

On 04/28/2017 06:12 PM, Teknoskillz wrote:
> Did the usual package updates today from Webmin, all went ok except when
> upgrading Apache2. There was a timeout, and the service never restarted
> during the upgrade process.
>
> I did a purge and remove via bash, and a reinstall , but still no go.
>
> =========================================================
> Fri Apr 28 22:33:30 UTC 2017
> ~# sudo apt-get --purge remove apache2
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following packages were automatically installed and are no longer
> required:
>    apache2-data apache2-utils
> Use 'sudo apt autoremove' to remove them.
> The following packages will be REMOVED:
>    apache2*
> 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
> After this operation, 514 kB disk space will be freed.
> Do you want to continue? [Y/n] y
> (Reading database ... 70372 files and directories currently installed.)
> Removing apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> Purging configuration files for apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> dpkg: warning: while removing apache2, directory '/var/www/html' not empty
> so no
> t removed
> dpkg: warning: while removing apache2, directory
> '/etc/apache2/sites-enabled' no
> t empty so not removed
> dpkg: warning: while removing apache2, directory '/etc/apache2/conf-enabled'
> not
>   empty so not removed
> Processing triggers for man-db (2.7.5-1) ...
> ~# sudo apt-get autoremove
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> Job for apache2.service failed because the control process exited with error
> cod
> e. See "systemctl status apache2.service" and "journalctl -xe" for details.
> invoke-rc.d: initscript apache2, action "start" failed.
> ? apache2.service - LSB: Apache2 web server
>     Loaded: loaded (/etc/init.d/apache2; enabled; vendor preset: enabled)
>     Active: activating (auto-restart) (Result: exit-code) since Fri
> 2017-04-28 22
> :36:45 UTC; 6ms ago
>       Docs: man:systemd-sysv-generator(8)
>    Process: 22561 ExecStart=/etc/init.d/apache2 start (code=exited,
> status=1/FAIL
> URE)
>
> Apr 28 22:36:45 systemd[1]: apache2.service: Control
> pr...
> Apr 28 22:36:45 systemd[1]: Failed to start LSB:
> Apache...
> Apr 28 22:36:45 systemd[1]: apache2.service: Unit
> enter...
> Apr 28 22:36:45 systemd[1]: apache2.service: Failed
> wit...
> Hint: Some lines were ellipsized, use -l to show in full.
> insserv: warning: current start runlevel(s) (empty) of script
> `apache-htcachecle
> an' overrides LSB defaults (2 3 4 5).
> insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script
> `apache-htc
> acheclean' overrides LSB defaults (0 1 6).
> Processing triggers for systemd (229-4ubuntu17) ...
> Processing triggers for ureadahead (0.100.0-19) ...
>
> ======================================================================
>
> Im not sure if its because I enabled mod_rewrite and there is a new path or
> something, but thats
> the only change thata major I did with Apache after trying to get the sites
> more SEO friendly recetly.
> There may have been 1 other module enabled, but I cant remember what it was.
> I went in and turned on rewrite
> and we are still failing.  Any help or ideas out there?
>
>
> ===
> Steve
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

-- 

[webmin-l] Apache2 down after package update

[Teknoskillz <tek...@co...>]

Did the usual package updates today from Webmin, all went ok except when 
upgrading Apache2. There was a timeout, and the service never restarted
during the upgrade process.

I did a purge and remove via bash, and a reinstall , but still no go.

=========================================================
Fri Apr 28 22:33:30 UTC 2017
~# sudo apt-get --purge remove apache2
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer
required:
  apache2-data apache2-utils
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  apache2*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 514 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 70372 files and directories currently installed.)
Removing apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
Purging configuration files for apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
dpkg: warning: while removing apache2, directory '/var/www/html' not empty
so no
t removed
dpkg: warning: while removing apache2, directory
'/etc/apache2/sites-enabled' no
t empty so not removed
dpkg: warning: while removing apache2, directory '/etc/apache2/conf-enabled'
not
 empty so not removed
Processing triggers for man-db (2.7.5-1) ...
~# sudo apt-get autoremove
Reading package lists... Done
Building dependency tree
Reading state information... Done
Job for apache2.service failed because the control process exited with error
cod
e. See "systemctl status apache2.service" and "journalctl -xe" for details.
invoke-rc.d: initscript apache2, action "start" failed.
? apache2.service - LSB: Apache2 web server
   Loaded: loaded (/etc/init.d/apache2; enabled; vendor preset: enabled)
   Active: activating (auto-restart) (Result: exit-code) since Fri
2017-04-28 22
:36:45 UTC; 6ms ago
     Docs: man:systemd-sysv-generator(8)
  Process: 22561 ExecStart=/etc/init.d/apache2 start (code=exited,
status=1/FAIL
URE)

Apr 28 22:36:45 systemd[1]: apache2.service: Control
pr...
Apr 28 22:36:45 systemd[1]: Failed to start LSB:
Apache...
Apr 28 22:36:45 systemd[1]: apache2.service: Unit
enter...
Apr 28 22:36:45 systemd[1]: apache2.service: Failed
wit...
Hint: Some lines were ellipsized, use -l to show in full.
insserv: warning: current start runlevel(s) (empty) of script
`apache-htcachecle
an' overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script
`apache-htc
acheclean' overrides LSB defaults (0 1 6).
Processing triggers for systemd (229-4ubuntu17) ...
Processing triggers for ureadahead (0.100.0-19) ...

======================================================================

Im not sure if its because I enabled mod_rewrite and there is a new path or
something, but thats
the only change thata major I did with Apache after trying to get the sites
more SEO friendly recetly.
There may have been 1 other module enabled, but I cant remember what it was.
I went in and turned on rewrite
and we are still failing.  Any help or ideas out there?


===
Steve

Re: [webmin-l] Virtualmin installed subpackages

[Jamie C. <jca...@we...>]

Oh, right. In that case, rather than removing the package it's simpler
just to disable the clamd server.

On 26/Apr/2017 13:08 Roger B.A. Klorese <ro...@qu...> wrote ..
> See below.
> 
> On 4/25/17 7:16 PM, Roger B.A. Klorese wrote:
> > It's an issue of dueling dependencies vs other mail-related packages.
> >
> > Sent from my iPhone
> >
> >> On Apr 25, 2017, at 4:53 PM, Jamie Cameron <jca...@we...> wrote:
> >>
> >> On 24/Apr/2017 19:31 Roger B.A. Klorese <ro...@qu...> wrote ..
> >>> Can clamav be removed from a Virtualmin-running CentOS system that
> >>> doesn't receive mail?
> >> Yes, it can - or to be simpler, you could just turn off the clamav server
> >> but keep it installed.
> >>
> 
> More specifically: on CentOS using the repo, virtualmin-base depends on 
> clamav.

Re: [webmin-l] Virtualmin installed subpackages

[Roger B.A. K. <ro...@qu...>]

See below.

On 4/25/17 7:16 PM, Roger B.A. Klorese wrote:
> It's an issue of dueling dependencies vs other mail-related packages.
>
> Sent from my iPhone
>
>> On Apr 25, 2017, at 4:53 PM, Jamie Cameron <jca...@we...> wrote:
>>
>> On 24/Apr/2017 19:31 Roger B.A. Klorese <ro...@qu...> wrote ..
>>> Can clamav be removed from a Virtualmin-running CentOS system that
>>> doesn't receive mail?
>> Yes, it can - or to be simpler, you could just turn off the clamav server
>> but keep it installed.
>>

More specifically: on CentOS using the repo, virtualmin-base depends on 
clamav.

Re: [webmin-l] WHMCS

[Jamie C. <jca...@we...>]

On 25/Apr/2017 20:38 Kimberly <kim...@gm...> wrote ..
> Can WHMCS be used with webmin/virtualmin?  If yes, are there any issues 
> to be aware of?

Yes, WHMCS can be used with Virtualmin - it has a plugin that can provision
domains on Virtualmin systems.

[webmin-l] WHMCS

[Kimberly <kim...@gm...>]

Can WHMCS be used with webmin/virtualmin?  If yes, are there any issues 
to be aware of?

Re: [webmin-l] Virtualmin installed subpackages

[Roger B.A. K. <ro...@qu...>]

It's an issue of dueling dependencies vs other mail-related packages. 

Sent from my iPhone

> On Apr 25, 2017, at 4:53 PM, Jamie Cameron <jca...@we...> wrote:
> 
> On 24/Apr/2017 19:31 Roger B.A. Klorese <ro...@qu...> wrote ..
>> Can clamav be removed from a Virtualmin-running CentOS system that 
>> doesn't receive mail?
> 
> Yes, it can - or to be simpler, you could just turn off the clamav server
> but keep it installed.
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Virtualmin installed subpackages

[Jamie C. <jca...@we...>]

On 24/Apr/2017 19:31 Roger B.A. Klorese <ro...@qu...> wrote ..
> Can clamav be removed from a Virtualmin-running CentOS system that 
> doesn't receive mail?

Yes, it can - or to be simpler, you could just turn off the clamav server
but keep it installed.

Re: [webmin-l] Out of Office

[Marsha P. <mp...@na...>]

Sorry guys,  It wasn't vacation.  Yes, a little slow getting back to work.  
I have turned off.
  
   Respectfully,
 Marsha Power
 NAMI Southern Arizona
 Quality Assurance and Information Technology Manager
 6122 E 22nd St
 Tucson, AZ  85711
 520-622-5582 / 520-999-1225
 mp...@na...
  

 "CONFIDENTIALITY NOTICE: This communication contains information intended 
for the use of the individuals to whom it is addressed and may contain 
information that is privileged, confidential or exempt from other 
disclosure under applicable law.  If you are not the intended recipient, 
you are notified that any disclosure, printing, copying, distribution or 
use of the contents is prohibited.  If you have received this in error, 
please notify the sender immediately by telephone or by returning it by 
return mail and then permanently delete the communication from your system. 
 Thank you."

  

----------------------------------------
 From: "Michael Huntley" <mi...@hu...>
Sent: Tuesday, April 25, 2017 1:18 PM
To: da...@sy..., "Webmin users list" 
<web...@li...>
Subject: Re: [webmin-l] Out of Office   

I sent her a private note several days ago.  

Perhaps she never made it back from vacation!   

   

On 2017-04-25 07:38, Dave Overton wrote:   From: Marsha Power 
[mailto:mp...@na...]  Sent: Tuesday, April 25, 2017 1:47 AM
To: web...@li...
Subject: [webmin-l] Out of Office

Out of the office from 4/6/17 to 4/16/17.  Also, I will not be checking
email.  Marsha

  
Okay Marsha, its after the 16th, you can turn these off...  Betting 
everyone
on this list would be glad to see them end.

----------------------------------------------------------------------------
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-
Forwarded by the Webmin mailing list at 
web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Out of Office

[Michael H. <mi...@hu...>]

I sent her a private note several days ago. 

Perhaps she never made it back from vacation!

On 2017-04-25 07:38, Dave Overton wrote:

> From: Marsha Power [mailto:mp...@na...] 
> 
>> Sent: Tuesday, April 25, 2017 1:47 AM
>> To: web...@li...
>> Subject: [webmin-l] Out of Office
>> 
>> Out of the office from 4/6/17 to 4/16/17.  Also, I will not be checking
>> email.  Marsha
> 
> Okay Marsha, its after the 16th, you can turn these off...  Betting everyone
> on this list would be glad to see them end.
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Out of Office

[Dave O. <da...@sy...>]

From: Marsha Power [mailto:mp...@na...]
> Sent: Tuesday, April 25, 2017 1:47 AM
> To: web...@li...
> Subject: [webmin-l] Out of Office
> 
> Out of the office from 4/6/17 to 4/16/17.  Also, I will not be checking
> email.  Marsha
> 
> 
> 

Okay Marsha, its after the 16th, you can turn these off...  Betting everyone
on this list would be glad to see them end.

[webmin-l] Out of Office

[Marsha P. <mp...@na...>]

Out of the office from 4/6/17 to 4/16/17.  Also, I will not be checking email.  Marsha

Re: [webmin-l] Webmin security issue

[Waleed A. <w....@gm...>]

Thank you very much Michael!

It works. It is still strange that Webmin allows users to access folders
which they should access through their system login privileges.

Regards,
  Waleed

On Mon, Apr 24, 2017 at 8:54 PM, Michael Huntley <mi...@hu...>
wrote:

> Waleed -
>
> Under Webmin .. Webmin Users select one of your users and then go back to
> "Available Webmin Modules".
>
> Find Filemanager, you'll see it is a clickable link.  Click it - in there
> you can restrict access to particular folders, "Allow access to
> directories".
>
> Also change "Can Edit Configuration Module?" to No. Scroll down near the
> bottom to "Access Files As Unix User".  The default may be root.  Choose
> either the Webmin User, or a unix user you want.
>
> You may need to go into "Permissions For All Modules" to further restrict
> access to user/group selection, etc.
>
> Cheers!
>
> mph
>
>
>
> On 2017-04-24 04:09, Waleed Alsanie wrote:
>
> I deleted the users from the sudoers group. I granted then an access to
> the File Manager module in webmin, and the surprise is that they still can
> access other users's files including .profile and everything which they
> cannot access through the ssh!
>
> On Mon, Apr 24, 2017 at 1:26 AM, Andrey Repin <anr...@ya...> wrote:
>
>> Greetings, Waleed Alsanie!
>>
>> >>Sudo-capable users having full root access in Webmin is expected ..
>> >>because they can run any command as root when logging in via SSH,
>> >>there's no security risk to them having root access in Webmin as well.
>>
>> > Thanks Jamie,
>> > But they do not login via SSH.
>>
>> Doesn't matter.
>>
>> > We installed Webmin to allow them to use it instead of ssh.
>>
>> Then let them use it. Why you're using wrong tools and demand them to
>> work in
>> the "right way"?
>>
>> >>The first question is WHY these users have sudo access in first place?
>> > We want them to manage some activities in the server
>>
>> So, DO THAT. Don't substitute one (system sudo) for another (webmin
>> permissions).
>>
>>
>> --
>> With best regards,
>> Andrey Repin
>> Monday, April 24, 2017 01:25:13
>>
>> Sorry for my terrible english...
>>
>>
>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list at web...@li...urceforg
>> e.net
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>

[webmin-l] Virtualmin installed subpackages

[Roger B.A. K. <ro...@qu...>]

Can clamav be removed from a Virtualmin-running CentOS system that 
doesn't receive mail?

Re: [webmin-l] Webmin security issue

[Michael H. <mi...@hu...>]

Waleed - 

Under Webmin .. Webmin Users select one of your users and then go back
to "Available Webmin Modules". 

Find Filemanager, you'll see it is a clickable link.  Click it - in
there you can restrict access to particular folders, "Allow access to
directories". 

Also change "Can Edit Configuration Module?" to No. Scroll down near the
bottom to "Access Files As Unix User".  The default may be root.  Choose
either the Webmin User, or a unix user you want. 

You may need to go into "Permissions For All Modules" to further
restrict access to user/group selection, etc. 

Cheers! 

mph

On 2017-04-24 04:09, Waleed Alsanie wrote:

> I deleted the users from the sudoers group. I granted then an access to the File Manager module in webmin, and the surprise is that they still can access other users's files including .profile and everything which they cannot access through the ssh! 
> 
> On Mon, Apr 24, 2017 at 1:26 AM, Andrey Repin <anr...@ya...> wrote:
> 
>> Greetings, Waleed Alsanie!
>> 
>>>> Sudo-capable users having full root access in Webmin is expected ..
>>>> because they can run any command as root when logging in via SSH,
>>>> there's no security risk to them having root access in Webmin as well.
>> 
>>> Thanks Jamie,
>>> But they do not login via SSH.
>> 
>> Doesn't matter.
>> 
>>> We installed Webmin to allow them to use it instead of ssh.
>> 
>> Then let them use it. Why you're using wrong tools and demand them to work in
>> the "right way"?
>> 
>>>> The first question is WHY these users have sudo access in first place?
>>> We want them to manage some activities in the server
>> 
>> So, DO THAT. Don't substitute one (system sudo) for another (webmin
>> permissions).
>> 
>> --
>> With best regards,
>> Andrey Repin
>> Monday, April 24, 2017 01:25:13
>> 
>> Sorry for my terrible english...
>> 
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list at web...@li...
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list [1]
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot 
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
 

Links:
------
[1] http://lists.sourceforge.net/lists/listinfo/webadmin-list

[webmin-l] Out of Office

[Marsha P. <mp...@na...>]

Out of the office from 4/6/17 to 4/16/17.  Also, I will not be checking email.  Marsha

Re: [webmin-l] Webmin security issue

[Waleed A. <w....@gm...>]

I deleted the users from the sudoers group. I granted then an access to the
File Manager module in webmin, and the surprise is that they still can
access other users's files including .profile and everything which they
cannot access through the ssh!

On Mon, Apr 24, 2017 at 1:26 AM, Andrey Repin <anr...@ya...> wrote:

> Greetings, Waleed Alsanie!
>
> >>Sudo-capable users having full root access in Webmin is expected ..
> >>because they can run any command as root when logging in via SSH,
> >>there's no security risk to them having root access in Webmin as well.
>
> > Thanks Jamie,
> > But they do not login via SSH.
>
> Doesn't matter.
>
> > We installed Webmin to allow them to use it instead of ssh.
>
> Then let them use it. Why you're using wrong tools and demand them to work
> in
> the "right way"?
>
> >>The first question is WHY these users have sudo access in first place?
> > We want them to manage some activities in the server
>
> So, DO THAT. Don't substitute one (system sudo) for another (webmin
> permissions).
>
>
> --
> With best regards,
> Andrey Repin
> Monday, April 24, 2017 01:25:13
>
> Sorry for my terrible english...
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

Re: [webmin-l] Webmin security issue

[Andrey R. <anr...@ya...>]

Greetings, Waleed Alsanie!

>>Sudo-capable users having full root access in Webmin is expected ..
>>because they can run any command as root when logging in via SSH,
>>there's no security risk to them having root access in Webmin as well.

> Thanks Jamie, 
> But they do not login via SSH.

Doesn't matter.

> We installed Webmin to allow them to use it instead of ssh.

Then let them use it. Why you're using wrong tools and demand them to work in
the "right way"?

>>The first question is WHY these users have sudo access in first place?
> We want them to manage some activities in the server

So, DO THAT. Don't substitute one (system sudo) for another (webmin
permissions).


-- 
With best regards,
Andrey Repin
Monday, April 24, 2017 01:25:13

Sorry for my terrible english...

Re: [webmin-l] Webmin security issue

[Waleed A. <w....@gm...>]

>Sudo-capable users having full root access in Webmin is expected ..
>because they can run any command as root when logging in via SSH,
>there's no security risk to them having root access in Webmin as well.

Thanks Jamie,
But they do not login via SSH. We installed Webmin to allow them to use it
instead of ssh.


>The first question is WHY these users have sudo access in first place?
We want them to manage some activities in the server (starting up,
shutdown, some files in the /var/www dir ... etc). However, the risk is
that they have a full access to the user's command history and they can
view their proxy credential in the settings of the environment variables!

Regards,

On Sun, Apr 23, 2017 at 10:52 PM, Andrey Repin <anr...@ya...> wrote:

> Greetings, Waleed Alsanie!
>
> > Unfortunately, users with sudo access can get the setting of the
> environment
> > variables of the other users through this unlimited access!
>
> The first question is WHY these users have sudo access in first place?
>
>
> --
> With best regards,
> Andrey Repin
> Sunday, April 23, 2017 22:52:12
>
> Sorry for my terrible english...
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

Re: [webmin-l] Webmin security issue

[Andrey R. <anr...@ya...>]

Greetings, Waleed Alsanie!

> Unfortunately, users with sudo access can get the setting of the environment
> variables of the other users through this unlimited access!

The first question is WHY these users have sudo access in first place?


-- 
With best regards,
Andrey Repin
Sunday, April 23, 2017 22:52:12

Sorry for my terrible english...

Re: [webmin-l] Webmin security issue

[Jamie C. <jca...@we...>]

Sudo-capable users having full root access in Webmin is expected ..
because they can run any command as root when logging in via SSH,
there's no security risk to them having root access in Webmin as well.

On 23/Apr/2017 12:32 Waleed Alsanie <w....@gm...> wrote ..
> The problem is that we are managing a server which runs behind a proxy.
> Some users set their proxy authentication in http_proxy variable.
> Unfortunately, users with sudo access can get the setting of the
> environment variables of the other users through this unlimited access!
> 
> On Sun, Apr 23, 2017 at 3:57 PM, Yehuda Katz <ye...@ym...> wrote:
> 
> > This isn't a security issue in Webmin.
> >
> > When you give a user sudo access, they can access any other user's home
> > directory without Webmin. The whole purpose of sudo is to allow users to
> > have root privileges.
> > You probably want to manage your users directly in Webmin.
> > First, you need to disable the option "Allow users who can run all
> > commands via sudo to login as root". This potion is in Webmin on
> > /acl/edit_unix.cgi
> > Then you need to configure Webmin with how to synchronize users with
> > Ubuntu.
> > See the documentation: http://doxfer.webmin.com/Webmin/Webmin_Users
> >
> > - Y
> >
> >
> > On Sun, Apr 23, 2017 at 8:14 AM, Waleed Alsanie <w....@gm...> wrote:
> >
> >> Hello all,
> >>
> >> I have just found a security issue in Webmin working under Ubuntu. People
> >> with sudo access can access Webmin and then can view all the users' home
> >> directories with their files. Even if the files are protected, they still
> >> can be viewed by users with sudo access through webmin!
> >>
> >> Is there any solution to this?
> >>
> >> Regards,
> >>
> >> ------------------------------------------------------------
> >> ------------------
> >> Check out the vibrant tech community on one of the world's most
> >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> >> -
> >> Forwarded by the Webmin mailing list at web...@li...urceforg
> >> e.net
> >> To remove yourself from this list, go to
> >> http://lists.sourceforge.net/lists/listinfo/webadmin-list
> >>
> >>
> >
> > ------------------------------------------------------------
> > ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> > -
> > Forwarded by the Webmin mailing list at webadmin-list@lists.
> > sourceforge.net
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> >
> >

Re: [webmin-l] Webmin security issue

[Waleed A. <w....@gm...>]

The problem is that we are managing a server which runs behind a proxy.
Some users set their proxy authentication in http_proxy variable.
Unfortunately, users with sudo access can get the setting of the
environment variables of the other users through this unlimited access!



On Sun, Apr 23, 2017 at 3:57 PM, Yehuda Katz <ye...@ym...> wrote:

> This isn't a security issue in Webmin.
>
> When you give a user sudo access, they can access any other user's home
> directory without Webmin. The whole purpose of sudo is to allow users to
> have root privileges.
> You probably want to manage your users directly in Webmin.
> First, you need to disable the option "Allow users who can run all
> commands via sudo to login as root". This potion is in Webmin on
> /acl/edit_unix.cgi
> Then you need to configure Webmin with how to synchronize users with
> Ubuntu.
> See the documentation: http://doxfer.webmin.com/Webmin/Webmin_Users
>
> - Y
>
>
> On Sun, Apr 23, 2017 at 8:14 AM, Waleed Alsanie <w....@gm...> wrote:
>
>> Hello all,
>>
>> I have just found a security issue in Webmin working under Ubuntu. People
>> with sudo access can access Webmin and then can view all the users' home
>> directories with their files. Even if the files are protected, they still
>> can be viewed by users with sudo access through webmin!
>>
>> Is there any solution to this?
>>
>> Regards,
>>
>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list at web...@li...urceforg
>> e.net
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
>>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>

Re: [webmin-l] Webmin security issue

[Waleed A. <w....@gm...>]

Thanks Yehuda,

On Sun, Apr 23, 2017 at 3:57 PM, Yehuda Katz <ye...@ym...> wrote:

> This isn't a security issue in Webmin.
>
> When you give a user sudo access, they can access any other user's home
> directory without Webmin. The whole purpose of sudo is to allow users to
> have root privileges.
> You probably want to manage your users directly in Webmin.
> First, you need to disable the option "Allow users who can run all
> commands via sudo to login as root". This potion is in Webmin on
> /acl/edit_unix.cgi
> Then you need to configure Webmin with how to synchronize users with
> Ubuntu.
> See the documentation: http://doxfer.webmin.com/Webmin/Webmin_Users
>
> - Y
>
>
> On Sun, Apr 23, 2017 at 8:14 AM, Waleed Alsanie <w....@gm...> wrote:
>
>> Hello all,
>>
>> I have just found a security issue in Webmin working under Ubuntu. People
>> with sudo access can access Webmin and then can view all the users' home
>> directories with their files. Even if the files are protected, they still
>> can be viewed by users with sudo access through webmin!
>>
>> Is there any solution to this?
>>
>> Regards,
>>
>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list at web...@li...urceforg
>> e.net
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
>>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>

Re: [webmin-l] Webmin security issue

[Yehuda K. <ye...@ym...>]

This isn't a security issue in Webmin.

When you give a user sudo access, they can access any other user's home
directory without Webmin. The whole purpose of sudo is to allow users to
have root privileges.
You probably want to manage your users directly in Webmin.
First, you need to disable the option "Allow users who can run all commands
via sudo to login as root". This potion is in Webmin on /acl/edit_unix.cgi
Then you need to configure Webmin with how to synchronize users with Ubuntu.
See the documentation: http://doxfer.webmin.com/Webmin/Webmin_Users

- Y


On Sun, Apr 23, 2017 at 8:14 AM, Waleed Alsanie <w....@gm...> wrote:

> Hello all,
>
> I have just found a security issue in Webmin working under Ubuntu. People
> with sudo access can access Webmin and then can view all the users' home
> directories with their files. Even if the files are protected, they still
> can be viewed by users with sudo access through webmin!
>
> Is there any solution to this?
>
> Regards,
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>