Java : Permission denied

Support for Synology NAS, QNAP NAS and other Embedded Linux systems
Post Reply
Aurelien
Posts: 4
Joined: 27 Feb 2016, 14:22

Java : Permission denied

Post by Aurelien »

Hi,

I have the following error when using FileBot Node :

/usr/local/bin/filebot: line 53: java: Permission denied

When I execute the same command via SSH with the same admin account it works well (filebot -script 'fn:amc' /volume1/download/ --output /volume1/video/ --action move -non-strict --conflict auto --lang en --def 'music=y' 'unsorted=y' 'subtitles=eng' 'deleteAfterExtract=y' 'excludeList=.excludes' --log all --log-file '/volume1/@appstore/filebot-node/filebot.log').

I do not really understand what I have to do in order to fix this issue

Code: Select all

ENVIRONMENT { CONTENT_TYPE: 'application/x-www-form-urlencoded; charset=UTF-8',
  GATEWAY_INTERFACE: 'CGI/1.1',
  USER: 'admin',
  FILEBOT_CMD_UID: '1024',
  HTTP_X_REQUESTED_WITH: 'XMLHttpRequest',
  FILEBOT_NODE_HTTPS_CRT: '/usr/syno/etc/ssl/ssl.crt/server.crt',
  FILEBOT_NODE_HTTPS_KEY: '/usr/syno/etc/ssl/ssl.key/server.key',
  REMOTE_ADDR: '192.168.0.35',
  OLDPWD: '/usr/syno/synoman/webman/modules/PkgManApp',
  QUERY_STRING: '',
  HTTP_USER_AGENT: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.109 Safari/537.36',
  DOCUMENT_ROOT: '/usr/syno/synoman',
  REMOTE_PORT: '65329',
  SYNOPKG_DSM_VERSION_MAJOR: '5',
  FILEBOT_NODE_AUTH: 'SYNO',
  SYNOPKG_PKG_PROGRESS_PATH: '/tmp/install_progress_filebot-node',
  HTTP_ACCEPT: '*/*',
  SERVER_SIGNATURE: '',
  CONTENT_LENGTH: '306',
  SYNOPKG_TEMP_LOGFILE: '/volume1/@tmp/56D1B48A5CCEB33',
  SCRIPT_FILENAME: '/usr/syno/synoman/webman/modules/PkgManApp/PkgSynoMan.cgi',
  SYNOPKG_PKGDEST: '/volume1/@appstore/filebot-node',
  SYNOPKG_USERNAME: 'admin',
  HTTP_HOST: '192.168.0.43:5000',
  SYNOPKG_DSM_ARCH: 'evansport',
  FILEBOT_NODE_HTTP_PORT: '5452',
  SYNOPKG_PKG_STATUS: 'INSTALL',
  REQUEST_URI: '/webman/modules/PkgManApp/PkgSynoMan.cgi',
  SERVER_SOFTWARE: 'Apache',
  HTTP_CONNECTION: 'keep-alive',
  USERNAME: 'admin',
  FILEBOT_NODE_HTTPS_PORT: '5453',
  MOD_X_SENDFILE_ENABLED: 'yes',
  HTTP_COOKIE: '_ga=GA1.1.574793712.1451314581; jwplayer.volume=50; stay_login=1; id=06t2tsMq2Tem.1490LTN251210',
  SYNOPKG_DSM_VERSION_MINOR: '2',
  FILEBOT_NODE_HOST: '0.0.0.0',
  PATH: '/sbin:/bin:/usr/sbin:/usr/bin:/usr/syno/sbin:/usr/syno/bin:/usr/local/sbin:/usr/local/bin',
  HTTP_ACCEPT_LANGUAGE: 'fr-FR,fr;q=0.8,en-US;q=0.6,en;q=0.4',
  FILEBOT_NODE_HTTP: 'YES',
  '   ': '/usr/syno/synoman/webman/modules/PkgManApp/PkgSynoMan.cgi',
  HTTP_REFERER: 'http://192.168.0.43:5000/webman/index.cgi',
  SYNOPKG_PKGVER: '0.1.7',
  HTTP_X_SYNO_TOKEN: '06Zpj3gl3nGKI',
  SERVER_PROTOCOL: 'HTTP/1.1',
  HTTP_ACCEPT_ENCODING: 'gzip, deflate',
  SCRIPT_URI: 'http://192.168.0.43:5000/webman/modules/PkgManApp/PkgSynoMan.cgi',
  FILEBOT_CMD_GID: '101',
  FILEBOT_NODE_HTTPS: 'YES',
  SCRIPT_URL: '/webman/modules/PkgManApp/PkgSynoMan.cgi',
  REQUEST_METHOD: 'POST',
  SERVER_ADDR: '192.168.0.43',
  SERVER_ADMIN: 'admin',
  FILEBOT_NODE_CLIENT: '',
  FILEBOT_CMD: 'filebot',
  PWD: '/volume1/@appstore/filebot-node',
  HTTP_ORIGIN: 'http://192.168.0.43:5000',
  SYNOPKG_DSM_LANGUAGE: 'fre',
  SERVER_PORT: '5000',
  SCRIPT_NAME: '/webman/modules/PkgManApp/PkgSynoMan.cgi',
  SYNOPKG_PKGDEST_VOL: '/volume1',
  SYNOPKG_PKGNAME: 'filebot-node',
  FILEBOT_CMD_CWD: '/volume1',
  SERVER_NAME: '192.168.0.43',
  SYNOPKG_DSM_VERSION_BUILD: '5644' }
USER { UID: 1024, GID: 101 }
filebot-node listening at http://0.0.0.0:5452
filebot-node listening at https://0.0.0.0:5453
AUTH_CACHE: {"id=06t2tsMq2Tem.1490LTN251210":"admin"}
User avatar
rednoah
The Source
Posts: 23006
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: Java : Permission denied

Post by rednoah »

No idea. Presumably some AppArmor profile thing that doesn't let you execute anything as this user/group:

Code: Select all

USER { UID: 1024, GID: 101 }

What do you get back for these commands?

Code: Select all

id

Code: Select all

id -u

Code: Select all

id -g

Code: Select all

cat /etc/group | grep 'administrators' | cut -d: -f3

The people in the Synology forums might know more.


EDIT:


Please read this thread and look at the system logs:
https://forum.synology.com/enu/viewtopic.php?t=92592
:idea: Please read the FAQ and How to Request Help.
Aurelien
Posts: 4
Joined: 27 Feb 2016, 14:22

Re: Java : Permission denied

Post by Aurelien »

Here is what I have:
id:

Code: Select all

uid=1024(admin) gid=100(users) groups=25(smmsp),100(users),101(administrators)
id -u

Code: Select all

1024
id -g

Code: Select all

100
cat /etc/group | grep 'administrators' | cut -d: -f3

Code: Select all

101
User avatar
rednoah
The Source
Posts: 23006
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: Java : Permission denied

Post by rednoah »

How about dmesg?

Code: Select all

dmesg
:idea: Please read the FAQ and How to Request Help.
Aurelien
Posts: 4
Joined: 27 Feb 2016, 14:22

Re: Java : Permission denied

Post by Aurelien »

I have kept only the last rows
I have also deactived apparmor (/usr/syno/etc.defaults/rc.sysv/apparmor.sh stop) and restarted FileBot Node but it still does not work

Code: Select all

[273438.665960] type=1400 audit(1454041205.434:2): apparmor="DENIED" operation="exec" parent=13782 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=13787 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[393525.504375] usbcore: deregistering interface driver snd-usb-hiface
[393525.615237] usbcore: deregistering interface driver snd-usb-audio
[393545.147379] usbcore: registered new interface driver snd-usb-audio
[393545.226500] usbcore: registered new interface driver snd-usb-hiface
[875173.026759] type=1400 audit(1454643853.661:3): apparmor="DENIED" operation="exec" parent=27646 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=27649 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[876960.180806] type=1400 audit(1454645643.526:4): apparmor="DENIED" operation="exec" parent=29839 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=29842 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[1479315.756133] type=1400 audit(1455248913.899:5): apparmor="DENIED" operation="exec" parent=4471 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=4474 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[1481188.139668] type=1400 audit(1455250789.127:6): apparmor="DENIED" operation="exec" parent=6687 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=6690 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[1484719.782957] type=1400 audit(1455254326.133:7): apparmor="DENIED" operation="exec" parent=10717 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=10724 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[1603286.700226] Plex Media Serv[30543]: segfault at 0 ip b3cb0554 sp a60ce6e0 error 6 in libjemalloc.so.1[b3c80000+11f000]
[2083391.130106] type=1400 audit(1455853906.640:8): apparmor="DENIED" operation="exec" parent=5952 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=5955 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2084601.652920] type=1400 audit(1455855119.007:9): apparmor="DENIED" operation="exec" parent=7310 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=7312 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2088253.304701] type=1400 audit(1455858776.203:10): apparmor="DENIED" operation="exec" parent=10870 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=10873 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2406715.802088] ip_tables: (C) 2000-2006 Netfilter Core Team
[2406716.121668] ip6_tables: (C) 2000-2006 Netfilter Core Team
[2686896.174382] type=1400 audit(1456458328.217:11): apparmor="DENIED" operation="exec" parent=6492 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=6496 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2688838.751835] type=1400 audit(1456460273.746:12): apparmor="DENIED" operation="exec" parent=8677 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=8681 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2692349.976494] type=1400 audit(1456463790.301:13): apparmor="DENIED" operation="exec" parent=12139 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=12142 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2692961.484216] type=1400 audit(1456464402.737:14): apparmor="DENIED" operation="exec" parent=12918 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=12923 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2757761.225337] type=1400 audit(1456529300.884:15): apparmor="DENIED" operation="exec" parent=7085 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=7088 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2757937.005918] type=1400 audit(1456529476.936:16): apparmor="DENIED" operation="exec" parent=7381 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=7383 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[2758058.609130] type=1400 audit(1456529598.726:17): apparmor="DENIED" operation="exec" parent=7769 profile="/volume*/@appstore/DownloadStation/sbin/scheduler" name="/usr/syno/sbin/synoddnsinfo" pid=7771 comm="synodlmail" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
User avatar
rednoah
The Source
Posts: 23006
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: Java : Permission denied

Post by rednoah »

The log doesn't say anything about java or filebot so it might not be related to apparmor.


Does it make a difference if you change java to /usr/local/bin/java?

Code: Select all

/usr/local/bin/filebot: line 53: java: Permission denied

I'm pretty much out of ideas. Maybe you'll find something on Google, or you can try posting on the Synology forums or on Super User.
:idea: Please read the FAQ and How to Request Help.
Aurelien
Posts: 4
Joined: 27 Feb 2016, 14:22

Re: Java : Permission denied

Post by Aurelien »

Well it seemed that my link to Java was not properly done.
I have removed the link and created it again

Code: Select all

ln -s /var/packages/JavaManager/target/Java/bin/java /usr/local/bin/java
It is now working fine.
Thanks
Post Reply