Unable to access asterisk CLI

Asterisk Asterisk Support
1

Hey guys, I just started my journey to Asterisk and loving, so I am sorry if this question is too basic.

I installed Asterisk and I can verify the Asterisk installation by accessing the CLI using asterisk -rvvv
however I can only access the Asterisk if I am on the system as root.

for security reason, I have disabled the user root from being able to SSH into the Linux Box
I created a normal user apbx who can SSH into the box

but when I access the server with user apbx and issue the command asterisk -rvvv I get the below error:

asterisk : Unable to connect to remote asterisk (does /var/run/asterisk.ctl exist?)

I tried to work on the permission and ACL and not I get:

[apbx@Asterisk ~]$ asterisk -rvvv
-bash: /usr/sbin/asterisk: Permission denied
[apbx@Asterisk ~]$

hope anyone can help, to figure the issue.
I have turned off SeLinux but no luck.

2

below is how I set the permission but still not working

[root@Asterisk asterisk]# getfacl asterisk.ctl
file: asterisk.ctl
owner: root
group: root
user::rwx
group::r-x
group:apbx:rw- #effective:r–
mask::r-x
other::–x

[root@Asterisk asterisk]# getfacl asterisk.pid
file: asterisk.pid
owner: root
group: root
user::rw-
user:apbx:rwx
group::r-x
group:apbx:rw-
mask::rwx
other::r–

[root@Asterisk asterisk]# getfacl …/asterisk/
file: …/asterisk/
owner: root
group: root
user::rwx
group::r-x
group:apbx:rw-
mask::rwx
other::rwx
default:user::rwx
default:group::r-x
default:group:apbx:rw-
default:mask::rwx
default:other::r-x

[root@Asterisk asterisk]#

3

It wouldn’t help being able to run asterisk -r non-root if Asterisk is running root, as the CLI can be used to get Asterisk to run things as root.

4

when I run the command asterisk -r non-root I got the below error
Unable to access the running directory (Permission denied). Changing to ‘/’ for compatibility.
Unable to connect to remote asterisk (does /var/run/asterisk/asterisk.ctl exist?)

what I was able to run was asterisk -c
however, if I login into asterisk CLI using asterisk -c , seems like there is now way out of the CLI.

5

use sudo to allow the apbx user to run asterisk as root.

6

Either type su, press enter, then enter the root password, or use sudo asterisk -rvvvvvvv, then type in the user password (if that user is a sudo user).