SElinux problem with zabbix template postgres

Support for security such as Firewalls and securing linux
Post Reply
Lukasz1990
Posts: 3
Joined: 2021/10/07 13:35:56

SElinux problem with zabbix template postgres

Post by Lukasz1990 » 2021/10/07 13:43:40

Hello

bugsCentos.org redirected me on forum. I have problem with configuration SElinuxa. I configured SElinux but zabbix agent not work through all time. I see still on dashboard on example "Value "/var/lib/zabbix/postgresql/pgsql.replication.status.sql: Permission denied" of type "string" is not suitable for value type "Numeric (unsigned)"

I use audit2allow tool
I set:
semanage permissive -a zabbix_agent_t
ausearch -r -m avc -ts today | grep zabbix
ausearch -r -m avc -ts today | grep zabbix | audit2allow -M zabbix_module

and tool generate:
module zabbix_megacli1 1.0;

require {
type default_t;
type zabbix_agent_t;
type zabbix_var_lib_t;
class file { open read };
}

#============= zabbix_agent_t ==============

#!!!! WARNING: 'default_t' is a base type.
#allow zabbix_agent_t default_t:file read;
allow zabbix_agent_t zabbix_var_lib_t:file { open read };

if I installing module disappears problem in zabbix and all items and triggers good works

My question whether I have to install module or exists other solution on example use semanage and restorecon?

I asking because I trying added labels SElinux to template postgres but this not help

User avatar
TrevorH
Site Admin
Posts: 33218
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: SElinux problem with zabbix template postgres

Post by TrevorH » 2021/10/07 13:52:48

Well, actually I suggested there that you take it to the selinux mailing list as that's where the selinux experts hang out.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply