Bug 2083788

Summary: nagios plugings mislabeled
Product: [Fedora] Fedora Reporter: Vadym Chepkov <vchepkov>
Component: nagiosAssignee: Guido Aulisi <guido.aulisi>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 36CC: b.heden, dwalsh, grepl.miroslav, guido.aulisi, jose.p.oliveira.oss, linux, lvrabec, mmalik, omosnace, ondrejj, pkoncity, shawn.starr, smooge, s, swilkerson, vmojzis, zpytela
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-05-25 16:45:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Vadym Chepkov 2022-05-10 18:45:59 UTC 
With the release of Fedora 36 most of the nagios plugins are mislabeled and broken

There was related ticket that was closed without resolution for RHEL7.9
https://bugzilla.redhat.com/show_bug.cgi?id=1918915

The problem exists in Fedora 36

[root@fedora ~]# ls -lZ /usr/lib64/nagios/plugins/*
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_clamd -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_checkdisk_plugin_exec_t:s0  55080 Apr 27 21:19 /usr/lib64/nagios/plugins/check_disk
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 49928 Apr 27 21:19 /usr/lib64/nagios/plugins/check_dns
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_ftp -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 88040 Apr 27 21:19 /usr/lib64/nagios/plugins/check_http
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_imap -> check_tcp
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_jabber -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 37336 Apr 27 21:19 /usr/lib64/nagios/plugins/check_load
-rwxr-xr-x. 1 root root system_u:object_r:nagios_mail_plugin_exec_t:s0       25575 Apr 27 21:19 /usr/lib64/nagios/plugins/check_mailq
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 37784 Apr 27 21:19 /usr/lib64/nagios/plugins/check_mysql
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 33456 Apr 27 21:19 /usr/lib64/nagios/plugins/check_mysql_query
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 37360 Apr 27 21:19 /usr/lib64/nagios/plugins/check_nagios
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_nntp -> check_tcp
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_nntps -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 54632 Jan 20 21:35 /usr/lib64/nagios/plugins/check_nrpe
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 45872 Apr 27 21:19 /usr/lib64/nagios/plugins/check_ping
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_pop -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 50216 Apr 27 21:19 /usr/lib64/nagios/plugins/check_procs
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_simap -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 54472 Apr 27 21:19 /usr/lib64/nagios/plugins/check_smtp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 67352 Apr 27 21:19 /usr/lib64/nagios/plugins/check_snmp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 16656 Jan 20 21:03 /usr/lib64/nagios/plugins/check_snmp_disk
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0  1937 Jul 29  2012 /usr/lib64/nagios/plugins/check_snmp_extend
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 20720 Jan 20 21:03 /usr/lib64/nagios/plugins/check_snmp_proc
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_spop -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 33400 Apr 27 21:19 /usr/lib64/nagios/plugins/check_ssh
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_ssmtp -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 33264 Apr 27 21:19 /usr/lib64/nagios/plugins/check_swap
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 54432 Apr 27 21:19 /usr/lib64/nagios/plugins/check_tcp
lrwxrwxrwx. 1 root root system_u:object_r:lib_t:s0                               9 Apr 27 21:19 /usr/lib64/nagios/plugins/check_udp -> check_tcp
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 29032 Apr 27 21:19 /usr/lib64/nagios/plugins/check_users
-rwxr-xr-x. 1 root root system_u:object_r:bin_t:s0                           29056 Apr 27 21:19 /usr/lib64/nagios/plugins/negate
-rwxr-xr-x. 1 root root system_u:object_r:bin_t:s0                           24696 Apr 27 21:19 /usr/lib64/nagios/plugins/urlize
-rw-r--r--. 1 root root system_u:object_r:bin_t:s0                            2101 Apr 27 21:19 /usr/lib64/nagios/plugins/utils.pm
-rwxr-xr-x. 1 root root system_u:object_r:bin_t:s0                            2794 Apr 27 21:19 /usr/lib64/nagios/plugins/utils.sh
Comment 1 Vadym Chepkov 2022-05-10 18:47:44 UTC 
FYI, denials

----
time->Tue May 10 18:41:11 2022
type=AVC msg=audit(1652208071.789:423): avc:  denied  { getattr } for  pid=2037 comm="check_ping" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:41:11 2022
type=AVC msg=audit(1652208071.790:424): avc:  denied  { read } for  pid=2037 comm="check_ping" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:41:11 2022
type=AVC msg=audit(1652208071.790:425): avc:  denied  { read } for  pid=2037 comm="check_ping" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:41:11 2022
type=AVC msg=audit(1652208071.791:426): avc:  denied  { create } for  pid=2037 comm="check_ping" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:41:57 2022
type=AVC msg=audit(1652208117.818:427): avc:  denied  { getattr } for  pid=2038 comm="check_ping" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:41:57 2022
type=AVC msg=audit(1652208117.822:428): avc:  denied  { read } for  pid=2038 comm="check_ping" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:41:57 2022
type=AVC msg=audit(1652208117.822:429): avc:  denied  { read } for  pid=2038 comm="check_ping" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:41:57 2022
type=AVC msg=audit(1652208117.825:430): avc:  denied  { create } for  pid=2038 comm="check_ping" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:42:00 2022
type=AVC msg=audit(1652208120.787:431): avc:  denied  { getattr } for  pid=2039 comm="check_ping" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:42:00 2022
type=AVC msg=audit(1652208120.788:432): avc:  denied  { read } for  pid=2039 comm="check_ping" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:42:00 2022
type=AVC msg=audit(1652208120.789:433): avc:  denied  { read } for  pid=2039 comm="check_ping" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:42:00 2022
type=AVC msg=audit(1652208120.791:434): avc:  denied  { create } for  pid=2039 comm="check_ping" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:42:03 2022
type=AVC msg=audit(1652208123.784:475): avc:  denied  { execute } for  pid=2056 comm="check_ping" name="ping" dev="dm-3" ino=5909 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:ping_exec_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:42:11 2022
type=AVC msg=audit(1652208131.793:476): avc:  denied  { getattr } for  pid=2119 comm="check_ping" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:42:11 2022
type=AVC msg=audit(1652208131.796:477): avc:  denied  { read } for  pid=2119 comm="check_ping" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:42:11 2022
type=AVC msg=audit(1652208131.797:478): avc:  denied  { read } for  pid=2119 comm="check_ping" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:42:11 2022
type=AVC msg=audit(1652208131.799:479): avc:  denied  { create } for  pid=2119 comm="check_ping" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:42:24 2022
type=AVC msg=audit(1652208144.783:490): avc:  denied  { execute } for  pid=2160 comm="check_ping" name="ping" dev="dm-3" ino=5909 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:ping_exec_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:04 2022
type=AVC msg=audit(1652208184.804:491): avc:  denied  { getattr } for  pid=2161 comm="check_ssh" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:04 2022
type=AVC msg=audit(1652208184.806:492): avc:  denied  { read } for  pid=2161 comm="check_ssh" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:04 2022
type=AVC msg=audit(1652208184.807:493): avc:  denied  { read } for  pid=2161 comm="check_ssh" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:04 2022
type=AVC msg=audit(1652208184.809:494): avc:  denied  { create } for  pid=2161 comm="check_ssh" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:43:04 2022
type=AVC msg=audit(1652208184.810:495): avc:  denied  { getattr } for  pid=2161 comm="check_ssh" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:04 2022
type=AVC msg=audit(1652208184.810:496): avc:  denied  { read } for  pid=2161 comm="check_ssh" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:04 2022
type=AVC msg=audit(1652208184.811:497): avc:  denied  { create } for  pid=2161 comm="check_ssh" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:43:07 2022
type=AVC msg=audit(1652208187.827:498): avc:  denied  { getattr } for  pid=2162 comm="check_http" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:07 2022
type=AVC msg=audit(1652208187.827:499): avc:  denied  { read } for  pid=2162 comm="check_http" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:07 2022
type=AVC msg=audit(1652208187.828:500): avc:  denied  { read } for  pid=2162 comm="check_http" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:07 2022
type=AVC msg=audit(1652208187.830:501): avc:  denied  { create } for  pid=2162 comm="check_http" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:43:32 2022
type=AVC msg=audit(1652208212.795:502): avc:  denied  { create } for  pid=2163 comm="check_http" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=tcp_socket permissive=0
----
time->Tue May 10 18:43:57 2022
type=AVC msg=audit(1652208237.794:503): avc:  denied  { getattr } for  pid=2164 comm="check_http" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:57 2022
type=AVC msg=audit(1652208237.796:504): avc:  denied  { read } for  pid=2164 comm="check_http" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:57 2022
type=AVC msg=audit(1652208237.796:505): avc:  denied  { read } for  pid=2164 comm="check_http" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:43:57 2022
type=AVC msg=audit(1652208237.799:506): avc:  denied  { create } for  pid=2164 comm="check_http" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.800:507): avc:  denied  { create } for  pid=2166 comm="check_http" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=tcp_socket permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.910:508): avc:  denied  { getattr } for  pid=2169 comm="check_tcp" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.911:509): avc:  denied  { read } for  pid=2169 comm="check_tcp" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.911:510): avc:  denied  { read } for  pid=2169 comm="check_tcp" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.916:511): avc:  denied  { create } for  pid=2169 comm="check_tcp" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.958:512): avc:  denied  { getattr } for  pid=2168 comm="check_snmp_disk" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.959:513): avc:  denied  { read } for  pid=2168 comm="check_snmp_disk" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.959:514): avc:  denied  { read } for  pid=2168 comm="check_snmp_disk" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.961:515): avc:  denied  { create } for  pid=2168 comm="check_snmp_disk" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.962:516): avc:  denied  { getattr } for  pid=2168 comm="check_snmp_disk" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.962:517): avc:  denied  { read } for  pid=2168 comm="check_snmp_disk" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:37 2022
type=AVC msg=audit(1652208337.963:518): avc:  denied  { create } for  pid=2168 comm="check_snmp_disk" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.023:519): avc:  denied  { getattr } for  pid=2170 comm="check_http" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.025:520): avc:  denied  { getattr } for  pid=2171 comm="check_http" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.025:521): avc:  denied  { read } for  pid=2171 comm="check_http" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.026:522): avc:  denied  { read } for  pid=2171 comm="check_http" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.027:523): avc:  denied  { read } for  pid=2170 comm="check_http" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.028:524): avc:  denied  { read } for  pid=2170 comm="check_http" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.029:525): avc:  denied  { create } for  pid=2171 comm="check_http" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.030:526): avc:  denied  { create } for  pid=2170 comm="check_http" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.283:527): avc:  denied  { getattr } for  pid=2173 comm="check_snmp_proc" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.287:528): avc:  denied  { read } for  pid=2173 comm="check_snmp_proc" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.287:529): avc:  denied  { read } for  pid=2173 comm="check_snmp_proc" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.289:530): avc:  denied  { create } for  pid=2173 comm="check_snmp_proc" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.289:531): avc:  denied  { getattr } for  pid=2173 comm="check_snmp_proc" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.289:532): avc:  denied  { read } for  pid=2173 comm="check_snmp_proc" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.289:533): avc:  denied  { create } for  pid=2173 comm="check_snmp_proc" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.952:571): avc:  denied  { getattr } for  pid=2183 comm="check_ssh" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.953:572): avc:  denied  { read } for  pid=2183 comm="check_ssh" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.963:573): avc:  denied  { read } for  pid=2183 comm="check_ssh" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.966:574): avc:  denied  { getattr } for  pid=2182 comm="check_ssh" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.970:575): avc:  denied  { read } for  pid=2182 comm="check_ssh" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.970:576): avc:  denied  { read } for  pid=2182 comm="check_ssh" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.973:577): avc:  denied  { create } for  pid=2183 comm="check_ssh" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:45 2022
type=AVC msg=audit(1652208345.975:578): avc:  denied  { create } for  pid=2182 comm="check_ssh" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
----
time->Tue May 10 18:45:47 2022
type=AVC msg=audit(1652208347.805:583): avc:  denied  { execute } for  pid=2191 comm="check_ping" name="ping" dev="dm-3" ino=5909 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:ping_exec_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:46:11 2022
type=AVC msg=audit(1652208371.797:592): avc:  denied  { getattr } for  pid=2193 comm="check_ping" path="/etc/resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:46:11 2022
type=AVC msg=audit(1652208371.798:593): avc:  denied  { read } for  pid=2193 comm="check_ping" name="resolv.conf" dev="dm-3" ino=654 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:46:11 2022
type=AVC msg=audit(1652208371.799:594): avc:  denied  { read } for  pid=2193 comm="check_ping" name="hosts" dev="dm-3" ino=2489 scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0
----
time->Tue May 10 18:46:11 2022
type=AVC msg=audit(1652208371.801:595): avc:  denied  { create } for  pid=2193 comm="check_ping" scontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tcontext=system_u:system_r:nagios_unconfined_plugin_t:s0 tclass=udp_socket permissive=0
Comment 2 Zdenek Pytela 2022-05-11 11:04:45 UTC 
Switching the component. Some permissions need to be added for existing plugins and labels assigned for new plugins, perhaps with their own policies.
Comment 3 Jan ONDREJ 2022-05-25 12:16:03 UTC 
Same problem here. I am running in permissive mode, but lots of messages in audit logs.
Comment 4 Vadym Chepkov 2022-05-25 14:25:47 UTC 
I still feel like it is a selinux-policy issue, not nagios. Have you had a chance to review the ticket I linked? Clearly, components have proper labels defined, they just overshadowed by a wildcard record

for example

# semanage fcontext -l|grep check_ping
/usr/lib(64)?/nagios/plugins/check_ping            regular file       system_u:object_r:nagios_services_plugin_exec_t:s0

and yet

# ls -lZ /usr/lib64/nagios/plugins/check_ping  
-rwxr-xr-x. 1 root root system_u:object_r:nagios_unconfined_plugin_exec_t:s0 45872 Apr 27 21:19 /usr/lib64/nagios/plugins/check_ping

why does line win clearly above line is more specific?

/usr/lib/nagios/plugins/.*                         regular file       system_u:object_r:nagios_unconfined_plugin_exec_t:s0
Comment 5 Ben Cotton 2023-04-25 17:07:38 UTC 
This message is a reminder that Fedora Linux 36 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 36 on 2023-05-16.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '36'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 36 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.
Comment 6 Ludek Smid 2023-05-25 16:45:04 UTC 
Fedora Linux 36 entered end-of-life (EOL) status on 2023-05-16.

Fedora Linux 36 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.