| Summary: | Selinux prevents munin cron correct execution | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Johan Cwiklinski <fedora> | ||||
| Component: | munin | Assignee: | Kevin Fenzi <kevin> | ||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 15 | CC: | drjohnson1, ingvar, kevin | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | munin-1.4.6-4.fc15.1 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2011-08-18 21:27:24 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Attachments: |
|
||||||
|
Description
Johan Cwiklinski
2011-08-16 20:36:24 UTC
Could you attach the output of the following? su -c 'ausearch -m avc -ts today > /tmp/munin-master-processmanager.txt' Thank you in advance. -- Fedora Bugzappers volunteer triage team https://fedoraproject.org/wiki/BugZappers Created attachment 518903 [details]
ausearch results
Thank you for the update. Can you run this next? su -c 'restorecon -Rv /var /run' It looks like you may have some mislabeled files in there that are affecting httpd and munin. After that completes, do you still get AVC's? Did you move any of the locations for where munin or httpd access files? If so, this may help: https://docs.fedoraproject.org/en-US/Fedora/13/html/Managing_Confined_Services/chap-Managing_Confined_Services-The_Apache_HTTP_Server.html #============= httpd_t ============== allow httpd_t httpd_log_t:file write; #============= munin_t ============== allow munin_t var_run_t:sock_file { write create unlink setattr }; -- Fedora Bugzappers volunteer triage team https://fedoraproject.org/wiki/BugZappers Hello, Restorecon seems to solve the problem: restorecon reset /var/run/munin context system_u:object_r:var_run_t:s0->system_u:object_r:munin_var_run_t:s0 I did not change anything; just did a 'yum install munin' on a fresh F-15 install. Well, problem is solved, thanks you for the help :) munin-1.4.6-4.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/munin-1.4.6-4.fc16 munin-1.4.6-4.fc15 has been submitted as an update for Fedora 15. https://admin.fedoraproject.org/updates/munin-1.4.6-4.fc15 munin-1.4.6-4.fc15.1 has been submitted as an update for Fedora 15. https://admin.fedoraproject.org/updates/munin-1.4.6-4.fc15.1 munin-1.4.6-4.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report. munin-1.4.6-4.fc15.1 has been pushed to the Fedora 15 stable repository. If problems still persist, please make note of it in this bug report. |