Bug 1918443 - Web UI says, "Access to file is not permitted: /usr/share/netdata/web/index.html"
Summary: Web UI says, "Access to file is not permitted: /usr/share/netdata/web/index.h...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: netdata
Version: epel7
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Didier Fabert (tartare)
QA Contact: Fedora Extras Quality Assurance
URL: http://<myserver>:19999
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-01-20 18:01 UTC by Neil MacGregor
Modified: 2021-05-12 05:50 UTC (History)
2 users (show)

Fixed In Version: netdata-1.29.0-1.fc33 netdata-1.29.0-1.fc32 netdata-1.29.0-1.el7 netdata-1.30.1-2.fc34 netdata-1.30.1-2.fc33 netdata-1.30.1-2.fc32 netdata-1.30.1-2.el7 netdata-1.30.1-2.el8
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-05-05 01:21:41 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Neil MacGregor 2021-01-20 18:01:28 UTC
User-Agent:       Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0
Build Identifier: 

An automatic update to netdata-1.28.0-2.el7.x86_64 last Sunday left the Netdata GUI non-functional, displaying only the message in the Summary field.

However, we have Prometheus set up to query Netdata's API, and that continued to function normally.

Reproducible: Always

Steps to Reproduce:
1. Start with the previous version, netdata-1.26.0-2.el7.x86_64 (ditto netdata-conf, & netdata-data)
2. Upgrade to the newest version, netdata-1.28.0-2.el7.x86_64
3. Examine http://<your server>:19999 to see the error message


Actual Results:  
Web UI says: "Access to file is not permitted: /usr/share/netdata/web/index.html"

Expected Results:  
Web UI ought to draw pretty graphs, instead of an error message.

This affected roughly 30 CentOS7 machines. 
I instituted a workaround which resolved the problem, but I don't want this to happen again at the next update: 
chown -R root:root /usr/share/netdata/

After instituting the workaround above, I used "yum downgrade netdata netdata-conf netdata-data", then "yum update -y", but this did not reproduce the problem.

Further, I used "yum remove <all 3 packages>" and found that /usr/share/netdata still existed. 

I proceeded to remove /usr/share/netdata/, then reinstalled the latest, restored my config, and finally restarted netdata.  The problem came back.

Comment 1 Didier Fabert (tartare) 2021-01-21 07:40:35 UTC
Hi,

You're right I only test new release in fresh install (container) and not update.

I modify group in last release to be the same as upstream, aka change group to netdata for dir  /usr/share/netdata/web and in settings file /etc/netdata/netdata.conf. So fresh install works because settings file and dir group are equal. In case of update, the settings file is marked as noreplace, so it will not be updated with yum update process and I forgot this point.

If you restore your config, "web files group" is set to root and mismatch with current group dir.
web files group = netdata

As an immediate workaround, I propose you to update netdata to last release and run the following command
sed -i -e '/web files group/ s/root/netdata/' /etc/netdata/netdata.conf

I try to find a definitive and transparent for user solution for this problem.

Comment 2 Fedora Update System 2021-02-05 13:36:03 UTC
FEDORA-2021-37384aa413 has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2021-37384aa413

Comment 3 Fedora Update System 2021-02-05 13:36:17 UTC
FEDORA-2021-e37820fc64 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2021-e37820fc64

Comment 4 Fedora Update System 2021-02-05 13:36:27 UTC
FEDORA-EPEL-2021-ed9867ed1e has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ed9867ed1e

Comment 5 Fedora Update System 2021-02-06 01:29:47 UTC
FEDORA-EPEL-2021-ed9867ed1e has been pushed to the Fedora EPEL 7 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ed9867ed1e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2021-02-06 01:58:45 UTC
FEDORA-2021-e37820fc64 has been pushed to the Fedora 32 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf install --enablerepo=updates-testing --advisory=FEDORA-2021-e37820fc64 \*`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-e37820fc64

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2021-02-06 02:13:30 UTC
FEDORA-2021-37384aa413 has been pushed to the Fedora 33 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf install --enablerepo=updates-testing --advisory=FEDORA-2021-37384aa413 \*`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-37384aa413

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2021-02-14 01:23:07 UTC
FEDORA-2021-37384aa413 has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Fedora Update System 2021-02-14 01:45:20 UTC
FEDORA-2021-e37820fc64 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Fedora Update System 2021-02-21 01:56:06 UTC
FEDORA-EPEL-2021-ed9867ed1e has been pushed to the Fedora EPEL 7 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Jürgen Botz 2021-04-21 19:58:27 UTC
I just did a completely fresh install on an F33 system that never had netdata before and got this error.  I had also noticed that during install dnf complained about there not being a netdata group, although after dnf completed the group did exist.

I resolved the problem for my case by 'chown -R netdata.netdata /usr/share/netdata/web' AND changing 'run as user = ' from 'root' to 'netdata' in the config file.  But clearly something is still not right in the RPM packages.  Maybe re-open this bug.

Comment 12 Didier Fabert (tartare) 2021-04-27 12:04:16 UTC
Hi Jürgen

The problem is different, netdata-data is installed before netdata, and then netdata user is not created yet (created by the netdata package). I fix it asap.

Thanks to report this.

Didier.

Comment 13 Fedora Update System 2021-04-27 14:02:37 UTC
FEDORA-2021-e1770f76fb has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-e1770f76fb

Comment 14 Fedora Update System 2021-04-27 14:02:48 UTC
FEDORA-2021-d6860adf6c has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2021-d6860adf6c

Comment 15 Fedora Update System 2021-04-27 14:02:56 UTC
FEDORA-2021-5e8ab27351 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2021-5e8ab27351

Comment 16 Fedora Update System 2021-04-27 14:03:05 UTC
FEDORA-EPEL-2021-162c7feeb7 has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-162c7feeb7

Comment 17 Fedora Update System 2021-04-27 14:03:10 UTC
FEDORA-EPEL-2021-20689d29d7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-20689d29d7

Comment 18 Fedora Update System 2021-04-27 17:26:05 UTC
FEDORA-2021-e1770f76fb has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf install --enablerepo=updates-testing --advisory=FEDORA-2021-e1770f76fb \*`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-e1770f76fb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 19 Fedora Update System 2021-04-28 00:35:59 UTC
FEDORA-2021-d6860adf6c has been pushed to the Fedora 33 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf install --enablerepo=updates-testing --advisory=FEDORA-2021-d6860adf6c \*`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-d6860adf6c

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 20 Fedora Update System 2021-04-28 00:41:19 UTC
FEDORA-EPEL-2021-162c7feeb7 has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-162c7feeb7

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 21 Fedora Update System 2021-04-28 00:45:54 UTC
FEDORA-EPEL-2021-20689d29d7 has been pushed to the Fedora EPEL 7 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-20689d29d7

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 22 Fedora Update System 2021-04-28 01:41:34 UTC
FEDORA-2021-5e8ab27351 has been pushed to the Fedora 32 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf install --enablerepo=updates-testing --advisory=FEDORA-2021-5e8ab27351 \*`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-5e8ab27351

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 23 Fedora Update System 2021-05-05 01:21:41 UTC
FEDORA-2021-e1770f76fb has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 24 Fedora Update System 2021-05-06 00:52:58 UTC
FEDORA-2021-d6860adf6c has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 25 Fedora Update System 2021-05-06 00:58:38 UTC
FEDORA-2021-5e8ab27351 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 26 Fedora Update System 2021-05-12 05:20:43 UTC
FEDORA-EPEL-2021-20689d29d7 has been pushed to the Fedora EPEL 7 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 27 Fedora Update System 2021-05-12 05:50:56 UTC
FEDORA-EPEL-2021-162c7feeb7 has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.