Description of problem:
With the default installation of PCP, we're observing a lot of avc: denied messages.
Version-Release number of selected component (if applicable): pcp-4.1.0-5.el7_6
How reproducible:
Always, however the exact deny messages depend on the applications installed. In this case it RHSAT 6.4.
Steps to Reproduce:
1. Install RHEL
2. Install PCP
3. Start pmcd
Actual results:
One machine:
Nov 11 03:13:14 xxx setroubleshoot: SELinux is preventing /var/lib/pcp/pmdas/linux/pmdalinux from unix_read access on the shared memory labeled postgresql_t. For complete SELinux messages run: sealert -l 2736eb3d-c900-40c3-8963-cccdd1bc8c09
Nov 11 03:13:14 xxx setroubleshoot: SELinux is preventing /var/lib/pcp/pmdas/linux/pmdalinux from unix_read access on the semaphore labeled postgresql_t. For complete SELinux messages run: sealert -l b731435c-ed5c-43ac-a4b3-4adc7d8d2b1b
Other machine:
Nov 12 15:36:17 xxy setroubleshoot: SELinux is preventing /var/lib/pcp/pmdas/linux/pmdalinux from unix_read access on the semaphore labeled rpm_script_t. For complete SELinux messages run: sealert -l 67029b6d-cc05-4115-ad59-14b8a2dd4b27
Nov 12 15:36:20 xxy setroubleshoot: SELinux is preventing /var/lib/pcp/pmdas/linux/pmdalinux from 'getattr, associate' accesses on the semaphore labeled rpm_script_t. For complete SELinux messages run: sealert -l e1ff56dd-0979-45b3-a2b3-b14f0a802ebb
Expected results:
No deny messages caused by PCP.
Additional info:
Customer case will be linked.