[ZBX-10094] Zabbix-agent not starting with SELinux enabled on CentOS 7.1 Created: 2015 Nov 18 Updated: 2018 Sep 27 Resolved: 2017 Oct 20 |
|
| Status: | Closed |
| Project: | ZABBIX BUGS AND ISSUES |
| Component/s: | Agent (G) |
| Affects Version/s: | 2.4.7 |
| Fix Version/s: | None |
| Type: | Incident report | Priority: | Major |
| Reporter: | Kevin COUSIN | Assignee: | Unassigned |
| Resolution: | Duplicate | Votes: | 0 |
| Labels: | selinux | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Environment: |
CentOS 7.1 |
||
| Attachments: |
log_jira_selinux.txt
|
||||||||||||
| Issue Links: |
|
||||||||||||
| Description |
|
I cannot lauch Zabbix agent on CentOS 7.1 system. SELinux deny access to zabbix_agentd.conf. Here is audit2allow command output : module local 1.0;
require {
type zabbix_agent_t;
class capability { dac_read_search dac_override };
}
#============= zabbix_agent_t ==============
allow zabbix_agent_t self:capability { dac_read_search dac_override };
|
| Comments |
| Comment by Aleksandrs Saveljevs [ 2015 Nov 19 ] |
|
kodai, could you please check whether there is anything to be done here? |
| Comment by Kevin COUSIN [ 2015 Nov 19 ] |
|
I use the RPM provided by Zabbix repo, that's why I post here. Perhaps I need to open a bug in RedHat Bugzilla on selinux-policy. |
| Comment by Kodai Terashima [ 2015 Nov 24 ] |
|
I cannot reproduce it with selinux-policy and selinux-policy-targeted packages. Please check your SELinux configuration, selinux-policy package doesn't have any policy files. |
| Comment by Oleksii Zagorskyi [ 2015 Nov 29 ] |
|
Issue closed for now, feel free to reopen if will be really required. |
| Comment by Kamil Porembinski [ 2017 Oct 20 ] |
|
I have checked on clean CentOS Linux release 7.3.1611 (Core) and the same issue. #============= zabbix_agent_t ==============
allow zabbix_agent_t self:capability { dac_read_search dac_override };
allow zabbix_agent_t self:process setrlimit;
[root@v101 ~]# yum info zabbix-agent
Installed Packages
Name : zabbix-agent
Arch : x86_64
Version : 3.4.3
Release : 1.el7
Size : 1.3 M
Repo : installed
From repo : zabbix
Summary : Zabbix Agent
URL : http://www.zabbix.com/
License : GPLv2+
Description : Zabbix agent to be installed on monitored systems.
@Oleksiy Zagorskyi, create new issue or you will reopen this? I can provide test machine with this issue. |
| Comment by Oleksii Zagorskyi [ 2017 Oct 20 ] |
|
Reopened and closed as duplicate. |