SELinux and RHEL6.2 preventing disk checks via NRPE

Dennis Kuhlmeier kuhlmeier at riege.com
Fri Dec 9 13:41:42 CET 2011


Hello,

after upgrading to RHEL6.2 I have problems checking some
filesystems. Always the same three FS on all hosts, others work fine.

/boot
/home
/var/log/audit

$ ./check_nrpe -H backup -c check_fs_boot
DISK CRITICAL - /boot is not accessible: Permission denied

Now I disable SELinux and it works!
$ ./check_nrpe -H backup -c check_fs_boot
DISK OK - free space: /boot 36 MB (39% inode=99%);| /boot=55MB;96;;0;96

Although not a single line is logged on the monitored host, neither
in messages nor in audit.log

I already had a local policy created for the nrpe daemon when RHEL6
was introduced, as somehow many checks failed, although the user
nrpe was running in was allowed to perform all checks, the nrpe
daemon itself couldn't. I'll attach the policy, although at one
point I gave up and just set the entire process to permissive mode.
(note that I tried to extend rights on boot filesystem in this
policy already, although it would seem to be unnecessary)

Anybody experiencing something alike or any suggestions about how to
handle nrpe and RHEL6(.2) in a better way than I am?

Regards,

Dennis




-- 


..............................................................
Riege Software International GmbH  Phone: +49 2159 91480
Mollsfeld 10                       Fax: +49 2159 914811
40670 Meerbusch                    Web: www.riege.com
Germany                            E-Mail: kuhlmeier at riege.com
--                                 --
Commercial Register:               Managing Directors:
Amtsgericht Neuss HRB-NR 4207      Christian Riege
VAT Reg No.: DE120585842           Gabriele  Riege
                                   Johannes  Riege
..............................................................
           YOU CARE FOR FREIGHT, WE CARE FOR YOU          



-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: nrpesudo.te
URL: <https://www.monitoring-lists.org/archive/users/attachments/20111209/c915804e/attachment.ksh>
-------------- next part --------------
------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null


More information about the Users mailing list