can't proc_open() gpg;

[razorfold]

Hi,

I've been trying to run gpg through proc_open() and have failed all
weekend. I keep getting this error from stderr:

"/usr/bin/gpg: error while loading shared libraries: cannot restore
segment prot after reloc: Permission denied"

Im running php 4.3.11 on fedora 3. Here is the method i've been
debugging. It should just run '/usr/bin/gpg --version' and display the
output.

Thanks in advance
-r

///
/// This method produces the output below...
///
function gpgVerify()
{

$gpgPath = '/usr/bin/gpg';

if(!is_executab le($gpgPath))
{
trigger_error(" gpgVerify::gpg is not executable",
E_USER_ERROR);
die();
}
else
{

// first we'll set up a pipe for gpg to write STDOUT to

$descriptorSpec = array(
1 => array("pipe", "w"),
2 => array("pipe", "w") // STDERR is a pipe that GnuPG
will write to);
);

$command = $gpgPath . " --version";

$gpgProcess = proc_open( $command, $descriptorSpec , $pipes);

if(is_resource( $gpgProcess))
{

$gpgOutput = '';

while(!feof($pi pes[1]))
{

$gpgOutput .= fgets($pipes[1], 1024);

}

echo '<hr>pipe[1] = <p>'.$gpgOutput ;

fclose($pipes[1]);

$stdErrOut = '';

while(!feof($pi pes[2]))
{

$stdErrOut .= fgets($pipes[2], 1024);

}

echo '<hr>pipe[2] = <p>'.$stdErrOut ;

fclose($pipes[2]);

// close the $gpgProcess

$processExitSta tus = proc_close($gpg Process);

echo '<hr>$processEx itStatus:<p>'.$ processExitStat us;

if(!ereg('^gpg ', $gpgOutput))
{
trigger_error(" gpg executable is not GnuPG.",
E_USER_ERROR);
die();
}

unset(
$gpgPath,
$gpgOutput,
$descriptorSpec ,
$command,
$gpgProcess,
$pipes,
$processExitSta tus,
$gpgErrorMessag e
);

}
else
{

trigger_error(" resource not available", E_USER_ERROR);
die();

}

}

return true;

}
///
/// output
///

pipe[1] =

pipe[2] =

/usr/bin/gpg: error while loading shared libraries: cannot restore
segment prot after reloc: Permission denied

$processExitSta tus:

127

Fatal error: gpg executable is not GnuPG. in
/home/test/public_html/SafeHaven2.0/EfmDebug.php on line 167

[Bent Stigsen]

ra*******@gmail .com wrote:

Hi,

I've been trying to run gpg through proc_open() and have failed all
weekend. I keep getting this error from stderr:

"/usr/bin/gpg: error while loading shared libraries: cannot restore
segment prot after reloc: Permission denied"

Im running php 4.3.11 on fedora 3. Here is the method i've been
debugging. It should just run '/usr/bin/gpg --version' and display the
output.

It is SELinux blocking the access. If you look in /var/log/messages,
you'll notice the security messages.

I dont know diddely squat about how to configure selinux, but I reckon
you can find what you seek in below link.
http://www.nsa.gov/selinux/papers/policy2-abs.cfm

I the meantime, just to see your script work, you can (temporarily)
disable the security enforcements by :

# echo 0 > /selinux/enforce
/Bent

[razorfold]

Thank you! That was very helpful. Im looking into SELinux now.