Bug 1947735

Summary:	EPEL8 SElinux prevents nagios starting
Product:	[Fedora] Fedora EPEL	Reporter:	George <ggr.seaton>
Component:	nagios	Assignee:	Guido Aulisi <guido.aulisi>
Status:	NEW ---	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	epel8	CC:	b.heden, guido.aulisi, jose.p.oliveira.oss, redhat, shawn.starr, smooge, s, swilkerson
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description George 2021-04-09 04:41:20 UTC

Description of problem:
SELINUX prevents nagios from starting after updating from
nagios-4.4.5-1.el8  to  4.4.6-4.el8
Version-Release number of selected component (if applicable):
 4.4.6-4.el8

How reproducible:
always

Steps to Reproduce:
1. dnf update
2. restart nagios
3.

Actual results:
SElinux prevents nagios starting


Expected results:
nagios starts

Additional info:
Apr 09 13:11:50 xxxxxxxx setroubleshoot[2713]: SELinux is preventing /usr/sbin/nagios (deleted) from search access on the directory private.

looks like the context has changed from 
 unconfined_u:object_r:nagios_etc_t:s0
to
system_u:object_r:nrpe_etc_t:s0

Comment 1 Guido Aulisi 2021-04-09 09:41:27 UTC

Cannot reproduce on a fresh installation of nagios on CentOS 8 stream.
Maybe a filesystem relabel could help.