Unable add plugins and themes to Wordpress

EddieJennings

I'm at a bit of a loss with this situation.

Within the GUI, if I try to add a plugin or theme, I receive this error.

Actual Wordpress Updates seem to be fine.

I manually installed the Health Check plugin, and some of these results make sense.

From what I've read cURL error 7 is "failure to connect." That seems straight forward enough.

Here's what I see as odd. I can ping 198.143.164.252 with no problem. Also I'm able to ping api.wordpress.org. Finally, I ran tcpdump while clicking add new plugins, and it looks like there's DNS query for api.wordpress.org that happens (and a response is received), but there's no other traffic destined to api.wordpress.org.

black3dynamite

Either apache doesn't have write permissions or SELinux needs to be configured.

JaredBusch

@black3dynamite said in Unable add plugins and themes to Wordpress:

Either apache doesn't have write permissions or SELinux needs to be configured.

SELinux.

EddieJennings

Thanks guys. l’ll see if SELinux is complaining later today.

JaredBusch

@EddieJennings said in Unable add plugins and themes to Wordpress:

Thanks guys. l’ll see if SELinux is complaining later today.

Likely https_can_connect or wtf ever that is.

Obsolesce

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

JaredBusch

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

Why put all of httpd into permissive?

Obsolesce

@JaredBusch said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

Why put all of httpd into permissive?

Quick test to verify issue

JaredBusch

@JaredBusch said in Unable add plugins and themes to Wordpress:

semanage permissive -a httpd_t

I used wp-cli on my last new server setup with WP. I did not set this boolean, so the setup process must have done it.

[jbusch@bnaweb01 ~]$ sudo getsebool -a | grep http | grep ' on'
httpd_builtin_scripting --> on
httpd_can_network_connect --> on
httpd_enable_cgi --> on

Obsolesce

@JaredBusch said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

semanage permissive -a httpd_t

I used wp-cli on my last new server setup with WP. I did not set this boolean, so the setup process must have done it.
[jbusch@bnaweb01 ~]$ sudo getsebool -a | grep http | grep ' on'
httpd_builtin_scripting --> on
httpd_can_network_connect --> on
httpd_enable_cgi --> on

It's been awhile since I set mine up per my blog instructions. I don't remember having to do that. Maybe I did, but I didn't incluse that in my instructions so I don't think I did.

JaredBusch

@Obsolesce said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:
@JaredBusch said in Unable add plugins and themes to Wordpress:

semanage permissive -a httpd_t

I used wp-cli on my last new server setup with WP. I did not set this boolean, so the setup process must have done it.
[jbusch@bnaweb01 ~]$ sudo getsebool -a | grep http | grep ' on'
httpd_builtin_scripting --> on
httpd_can_network_connect --> on
httpd_enable_cgi --> on
It's been awhile since I set mine up per my blog instructions. I don't remember having to do that. Maybe I did, but I didn't incluse that in my instructions so I don't think I did.

Last I knew, it is not enable by default. So I assumed that wp-cli did it.

EddieJennings

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

JaredBusch

@EddieJennings said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

Did oyu check the boolean's as noted?

EddieJennings

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

Did oyu check the boolean's as noted?

After trying out permissive, yes.
httpd_can_network_connect is off, though I thought I had taken care of that during my setup process. I know there is a setseboolcommand, but I want to see how to do it using fcontext as @Obsolesce suggested.

JaredBusch

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

Did oyu check the boolean's as noted?

After trying out permissive, yes.
httpd_can_network_connect is off, though I thought I had taken care of that during my setup process. I know there is a setseboolcommand, but I want to see how to do it using fcontext as @Obsolesce suggested.

silly.

EddieJennings

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

Did oyu check the boolean's as noted?

After trying out permissive, yes.
httpd_can_network_connect is off, though I thought I had taken care of that during my setup process. I know there is a setseboolcommand, but I want to see how to do it using fcontext as @Obsolesce suggested.

silly.

That I'm a n00b at SELinux and am probably spouting nonsense or that I'm following @Obsolesce 's advice?

JaredBusch

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

Did oyu check the boolean's as noted?

After trying out permissive, yes.
httpd_can_network_connect is off, though I thought I had taken care of that during my setup process. I know there is a setseboolcommand, but I want to see how to do it using fcontext as @Obsolesce suggested.

silly.

That I'm a n00b at SELinux and am probably spouting nonsense or that I'm following @Obsolesce 's advice?

That you don't even understand the advice you are following.

What @Obsolesce told you to do was to set ALL things marked as httpd_t to permissive. Effectively no different than setenforce 0 but jsut to the things with the tag httpd_t.

Change the boolean. Turn enforcing back on.

JaredBusch

@Obsolesce said in Unable add plugins and themes to Wordpress:

httpd_can_network_connect

First go look up WTF that boolean does if you want to learn something.

The name is plenty descriptive for most.

EddieJennings

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

Did oyu check the boolean's as noted?

After trying out permissive, yes.
httpd_can_network_connect is off, though I thought I had taken care of that during my setup process. I know there is a setseboolcommand, but I want to see how to do it using fcontext as @Obsolesce suggested.

silly.

That I'm a n00b at SELinux and am probably spouting nonsense or that I'm following @Obsolesce 's advice?

That you don't even understand the advice you are following.

What @Obsolesce told you to do was to set ALL things marked as httpd_t to permissive. Effectively no different than setenforce 0 but jsut to the things with the tag httpd_t.

Change the boolean. Turn enforcing back on.

I didn't type my thought clearly. The end goal is to find the right way to change httpd_can_network_connect to true, and make sure the value is persistent.

JaredBusch

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@Obsolesce said in Unable add plugins and themes to Wordpress:

Try this to see if it resolves the issue:
semanage permissive -a httpd_t

If that works, then you can do it properly with fcontext

SELinux was the problem. Next is narrowing down what config to fix, so everything isn't permissive.

Did oyu check the boolean's as noted?

After trying out permissive, yes.
httpd_can_network_connect is off, though I thought I had taken care of that during my setup process. I know there is a setseboolcommand, but I want to see how to do it using fcontext as @Obsolesce suggested.

silly.

That I'm a n00b at SELinux and am probably spouting nonsense or that I'm following @Obsolesce 's advice?

That you don't even understand the advice you are following.

What @Obsolesce told you to do was to set ALL things marked as httpd_t to permissive. Effectively no different than setenforce 0 but jsut to the things with the tag httpd_t.

Change the boolean. Turn enforcing back on.

I didn't type my thought clearly. The end goal is to find the right way to change httpd_can_network_connect to true, and make sure the value is persistent.

That does not mesh with WTF you just stated. The two are not the same thing.

You want to set a Boolean. Then you fucking use the tool designed to change booleans.