Description of problem: The zabbix server can't access the dir /var/lib/zabbixsrv/tmp because it has the wrong type, after running the following, everything seems okay. semanage fcontext -a -t zabbix_tmp_t '/var/lib/zabbixsrv/tmp(/.*)?' restorecon -v /var/lib/zabbixsrv/tmp Also I wonder if I will run into further issues later on, as /var/lib/zabbixsrv has the type system_u:object_r:var_lib_t:s0. And it has some folders /var/lib/zabbixsrv/alertscripts and /var/lib/zabbixsrv/externalscripts which are also of the type system_u:object_r:var_lib_t:s0, these are used for werious custom scripts that the server can run based on the rule that you make. Version-Release number of selected component (if applicable): selinux-policy-targeted-3.12.1-74.15.fc19.noarch How reproducible: Always Steps to Reproduce: 1. Install and configure the server and webui 2. Create/add network discovery rules which uses icmpping 3. Additional info: Additionally it seems like I need this too, so that the server can send mails require { type smtp_port_t; type zabbix_t; class process setpgid; class tcp_socket name_connect; } #============= zabbix_t ============== allow zabbix_t self:process setpgid; allow zabbix_t smtp_port_t:tcp_socket name_connect;
a34d2add48316bbe240a5076791f57c14be5b90a fixes this in git. I added zabbix_var_lib_t. and allow it to connect to smtp port. Fix for setpgid was already in the file.
back ported.
selinux-policy-3.12.1-74.17.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/selinux-policy-3.12.1-74.17.fc19
Package selinux-policy-3.12.1-74.17.fc19: * should fix your issue, * was pushed to the Fedora 19 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-74.17.fc19' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-0636/selinux-policy-3.12.1-74.17.fc19 then log in and leave karma (feedback).
selinux-policy-3.12.1-74.17.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.