https://console.aws.amazon.com/support/home?#/case/?displayId=7821445841&language=en https://console.aws.amazon.com/support/home#/case/?displayId=7821445841&language=en find / -name suexec -print /usr/sbin/suexec /root/suexec ### Deep Dive find / -name "suexec*" -print ## ######################################## find / -name suexec -print lsattr /usr/sbin/suexec lsattr /root/suexec diff /root/suexec /usr/sbin/suexec# lsattr /usr/sbin/suexec ----i----------- /usr/sbin/suexec # lsattr /root/suexec ----i----------- /root/suexec # diff /root/suexec /usr/sbin/suexec### Remove immutablity chattr -i /usr/sbin/suexec yum install httpd cp -p /root/suexec /usr/sbin/suexec ### Make immutable chattr +i /usr/sbin/suexec lsattr /usr/sbin/suexec diff /root/suexec /usr/sbin/suexec ## ######################################## ### Do not do these steps and see what happens!! ### SUEXEC mynot be used any more. diff /root/suexec /usr/sbin/suexec cp -p /root/suexec /usr/sbin/suexec ### rpm -Uvh https://dev.mysql.com/get/Downloads/Connector-Python/mysql-connector-python-8.0.22-1.el7.x86_64.rpm --nodeps ======================================================= ======================================================= ======================================================= yum install httpd conf.d/ssl.conf: SuexecUserGroup root vhosts systemctl stop httpd yum install httpd systemctl start httpd systemctl status httpd # out the line above from ssl.conf =========================================================================== systemctl stop httpd ### systemctl stop hmod_wsgi-express.service mv /usr/sbin/suexec /usr/sbin/suexec.unused yum install httpd mv /usr/sbin/suexec.unused /usr/sbin/suexec systemctl start hmod_wsgi-express.service systemctl status hmod_wsgi-express.service systemctl start httpd systemctl status httpd =========================================================================== =========================================================================== AWS BingWWW # egrep -R userdir * conf.d/userdir.conf:immutable” flag has been set which means that file can not be modified or unlinked reguardless of it’s standard POSIX permissions. We need to remove that flag in order for the package upgrade to complete. chattr lsattr