Resúmen: SELinux is preventing /usr/sbin/nagios "write" access on nagios.pid. Descripción Detallada: SELinux denied access requested by nagios. It is not expected that this access is required by nagios and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Permitiendo Acceso: You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Please file a bug report. Información Adicional: Contexto Fuente unconfined_u:system_r:nagios_t:s0 Contexto Destino unconfined_u:object_r:initrc_var_run_t:s0 Objetos Destino nagios.pid [ file ] Fuente nagios Dirección de Fuente /usr/sbin/nagios Puerto <Desconocido> Nombre de Equipo (removed) Paquetes RPM Fuentes nagios-3.2.0-2.fc12 Paquetes RPM Destinos RPM de Políticas selinux-policy-3.6.32-56.fc12 SELinux Activado True Tipo de Política targeted Modo Obediente Enforcing Nombre de Plugin catchall Nombre de Equipo (removed) Plataforma Linux localhost.localdomain 2.6.31.6-166.fc12.x86_64 #1 SMP Wed Dec 9 10:46:22 EST 2009 x86_64 x86_64 Cantidad de Alertas 1 Visto por Primera Vez jue 17 dic 2009 14:56:21 PET Visto por Última Vez jue 17 dic 2009 14:56:21 PET ID Local 28871683-16ba-4306-a02d-e9f64669a728 Números de Línea Mensajes de Auditoría Crudos node=localhost.localdomain type=AVC msg=audit(1261079781.573:42): avc: denied { write } for pid=3067 comm="nagios" name="nagios.pid" dev=sda2 ino=19095 scontext=unconfined_u:system_r:nagios_t:s0 tcontext=unconfined_u:object_r:initrc_var_run_t:s0 tclass=file node=localhost.localdomain type=SYSCALL msg=audit(1261079781.573:42): arch=c000003e syscall=2 success=no exit=-13 a0=c33110 a1=42 a2=1a4 a3=7fff5d3e6350 items=0 ppid=3058 pid=3067 auid=500 uid=485 gid=466 euid=485 suid=485 fsuid=485 egid=466 sgid=466 fsgid=466 tty=pts0 ses=1 comm="nagios" exe="/usr/sbin/nagios" subj=unconfined_u:system_r:nagios_t:s0 key=(null) Hash String generated from selinux-policy-3.6.32-56.fc12,catchall,nagios,nagios_t,initrc_var_run_t,file,write audit2allow suggests: #============= nagios_t ============== allow nagios_t initrc_var_run_t:file write;
Created attachment 379207 [details] Nagios init script has to fix label on pid file This patch adds a restorecon call to the init script to label the pid file correctly.
*** Bug 550578 has been marked as a duplicate of this bug. ***
nagios-3.2.0-4.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/nagios-3.2.0-4.fc12
nagios-3.2.0-4.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/nagios-3.2.0-4.fc13
nagios-3.2.0-4.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/nagios-3.2.0-4.fc11
nagios-3.2.0-4.fc11 has been pushed to the Fedora 11 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update nagios'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2010-2903
nagios-3.2.0-4.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update nagios'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2010-2917
nagios-3.2.0-4.fc13 has been pushed to the Fedora 13 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update nagios'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F13/FEDORA-2010-2957
nagios-3.2.0-4.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.
nagios-3.2.0-4.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.
nagios-3.2.0-4.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.