Upgrade fails: "/usr/bin: cpio: chown failed"

[eugenevdm]

My upgrade from Plesk 8.1.x to 8.2.0 fails. I get:

Downloading the file PSA_8.2.0/update-rpm-FedoraCore-4-i386/libxml2-python-2.6.20-1.FC4.i386.rpm: Filefetcher: get file PSA_8.2.0/update-rpm-FedoraCore-4-i386/libxml2-python-2.6.20-1.FC4.i386.rpm
21%..36%..50%..61%..74%..84%..92%..100% done.
Starting installation of packages
Create tiny repository only with resolved list and system packages
Regenerate packages provides cache.
Warning: unresolved requires '/usr/bin/lpr' from redhat-lsb-1.3-10.i386
Find directly required packages for courier-imap-3.0.8-fc4.build82070706.15.i586
(regen conflicts cache) (update package names cache) (regen obsoletes cache) prepareInstallStep: resolve results for package(s):
(s) system_installed_bash-3.0-31.i386.rpm
(s) system_installed_chkconfig-1.3.20-1.i386.rpm
(s) system_installed_perl-5.8.6-15.i386.rpm
(s) system_installed_coreutils-5.2.1-48.i386.rpm
(s) system_installed_xinetd-2.3.13-6.i386.rpm
(s) system_installed_glibc-2.3.5-10.3.i686.rpm
(s) system_installed_openssl-0.9.7f-7.10.i686.rpm
(s) system_installed_db4-4.3.27-5.fc4.i386.rpm
(s) system_installed_sed-4.1.4-1.i386.rpm
Installing the package courier-imap-3.0.8-fc4.build82070706.15.i586
Execute command rpm -U --test /root/swsoft/PSA_8.2.0/dist-rpm-FedoraCore-4-i386/base/courier-imap-3.0.8-fc4.build82070706.15.i586.rpm
Execute command rpm -U /root/swsoft/PSA_8.2.0/dist-rpm-FedoraCore-4-i386/base/courier-imap-3.0.8-fc4.build82070706.15.i586.rpm
Stopping Courier-IMAP server:
Stopping imap [ OK ]
Stopping imap-ssl [ OK ]
Stopping pop3 [ OK ]
Stopping pop3-ssl [ OK ]

error: unpacking of archive failed on file /usr/sbin: cpio: chown failed - Operation not permitted
Filefetcher: get file PSA_8.2.0/plesk-8.2.0-fc4-i386.inf3
ERROR: An error occurred during installation of packages.
Attention! Your software might be inoperable.
Please, contact product technical support.
Execute command getenforce

----

Please help!

 

[Amin Taheri]

Try and turn off SELinux

setenforce 0

 

[eugenevdm]

As I recall I fixed this problem by running:

chattr -ais filename multiple times when I got the CPIO error. My suspicion is the problem is a symptom of a hacked box.

 

[atomicturtle]

yeah that could be an LKM rootkit, what are the immutable settings on /usr/sbin set to? (lsattr /usr |grep sbin). The default setting should just be +I (indexed)

 

[Amin Taheri]

also if you run things like LES on the box it adds +i to a lot of files and directories.

 

[eugenevdm]

Originally posted by atomicturtle
...what are the immutable settings on /usr/sbin set to? (lsattr /usr |grep sbin). The default setting should just be +I (indexed)

Everything was like this:

suS-iadAc---- ./filename

Time for a re-install.

 

[atomicturtle]

Ouch. Thats ugly... that means that the when the file is deleted (s flag) its blocks are zeroed.. but with 'u' set the data is saved. Not sure how you even managed that, its for undelete support.

'S' means sync to the disk whenever it changes, 'i' is immutable, which is probably whats breaking cpio, same with 'a', that means append only (good for logs!). 'd' I had to look up, thats a tag used by the backup command dump, which means "dont back me up". 'A' means dont set atime (access time, when you read a file this changes. +A is good for performance), which leads to 'c', which means "compress"... which is bad for performance, but good for saving space.

Quite the schizophrenic configuration youve got there!