/srv/tomcat/bin/tomcat-juli.jar (Permission denied)

mfoley · 03-10-2023, 11:29 PM

This is another simple problem I'm stuck figuring out. I'm trying to compile a java program:

Code:

javac testMYSQL.java
error: error reading /srv/tomcat/bin/tomcat-juli.jar; /srv/tomcat/bin/tomcat-juli.jar (Permission denied)
1 error

The permissions on that file are:

Code:

ls -l /srv/tomcat/bin/tomcat-juli.jar
-rw-r-x--- 1 root tomcat 46861 Feb 21  2022 /srv/tomcat/bin/tomcat-juli.jar*

My user is cwauser. I have:

Code:

$ grep cwauser /etc/group
tomcat:x:200:cwauser

So, the tomcat-juli.jar file has group read permission for group tomcat, and user cwauser is a member of the tomcat group.

So why is the permission denied?

pan64 · 03-11-2023, 07:05 AM

you need to check all the parent dirs up to / (if cwauser has right to read those dirs).

mfoley · 03-11-2023, 10:44 AM

Quote:

Originally Posted by pan64

you need to check all the parent dirs up to / (if cwauser has right to read those dirs).

I believe I did do that:

Code:

# ls -ld /srv/tomcat/bin
drwxrwxr-x 2 root tomcat 4096 Mar  3  2022 /srv/tomcat/bin/

# ls -ld /srv/tomcat
lrwxrwxrwx 1 root root 37 Mar  2 01:48 /srv/tomcat -> /user/util/src/apache-tomcat-10.0.17//

# ls -ld /user/util/src/apache-tomcat-10.0.17/
drwxr-xr-x 9 root root 4096 Mar  2 02:26 /user/util/src/apache-tomcat-10.0.17//

# ls -ld /srv
drwxr-xr-x 2 root root 4096 Mar  2 01:48 /srv/

# ls -ld /
drwxr-xr-x 24 root root 4096 Mar 11 00:59 //

The directory tree appears to give rx to everyone. My group file shows cwauser as a member of this group (original post). I cannot even 'cat /srv/tomcat/bin/tomcat-juli.jar >/dev/null' without the permission error.

This computer uses PAM. Could that have something to do with it?

pan64 · 03-11-2023, 01:00 PM

so there is a symlink in it. In that case you might need to check /user/util/src/apache-tomcat-10.0.17 too.

mfoley · 03-17-2023, 11:46 PM

Quote:

Originally Posted by pan64

so there is a symlink in it. In that case you might need to check /user/util/src/apache-tomcat-10.0.17 too.

I did do that as well. Permissions on /user/util/src/apache-tomcat-10.0.17 are shown in post #3. Beneath that directory:

Code:

$ ls -ld /user/util/src/apache-tomcat-10.0.17/bin
drwxrwxr-x 2 root tomcat 4096 Mar  3  2022 /user/util/src/apache-tomcat-10.0.17/bin/

$ ls -l /user/util/src/apache-tomcat-10.0.17/bin/tomcat-juli.jar
-rwxr-x--- 1 root tomcat 46861 Feb 21  2022 /user/util/src/apache-tomcat-10.0.17/bin/tomcat-juli.jar*

As shown in my op, cwauser (my user) is a member of the tomcat group.

While I'm at it:

Code:

$ ls -ld /user
drwxr-xr-x 3 root root 4096 Feb 25 13:41 /user/

$ ls -ld /user/util
drwxr-xr-x 4 root root 4096 Feb 25 17:34 /user/util/

$ ls -ld /user/util/src
drwxr-xr-x 6 root root 4096 Mar 11 01:18 /user/util/src/

Very puzzling.

pan64 · 03-20-2023, 12:15 AM

you might try:

Code:

strace -o /tmp/filename -f cat /srv/tomcat/bin/tomcat-juli.jar >/dev/null

and look for the error message in /tmp/filename