SELinux and RHEL6.2 preventing disk checks via NRPE

Dennis Kuhlmeier kuhlmeier at riege.com
Mon Dec 12 17:28:17 CET 2011


Hello Trond,

On 09.12.2011 14:13, Trond Hasle Amundsen wrote:
> 
> RHEL6 has the following labels for use with Nagios plugins:
> 
>   # grep nagios /etc/selinux/targeted/contexts/files/file_contexts | grep plugin_exec | cut -d: -f3 | sort -u
>   nagios_admin_plugin_exec_t
>   nagios_checkdisk_plugin_exec_t
>   nagios_mail_plugin_exec_t
>   nagios_services_plugin_exec_t
>   nagios_system_plugin_exec_t
>   nagios_unconfined_plugin_exec_t
> 
> Try setting the confined types first, e.g.:
> 
>   chcon -t nagios_checkdisk_plugin_exec_t /path/to/check_fs_boot
> 
> If none of them works properly, you have nagios_unconfined_plugin_exec_t
> as a last resort.

the last resort in fact worked! Thanks!

> 
> When you find one that works, make it permanent with:
> 
>   semanage fcontext -a -t <type> '/path/to/check_fs_boot'
> 

Geez, there are a lot more contexts set than I thought. I should
probably remove duplicate entries, right?

> You may also have to set proper labels on the path leading up to the
> actual plugin.
> 
> Regards,


Thanks again,



-- 


..............................................................
Riege Software International GmbH  Phone: +49 2159 91480
Mollsfeld 10                       Fax: +49 2159 914811
40670 Meerbusch                    Web: www.riege.com
Germany                            E-Mail: kuhlmeier at riege.com
--                                 --
Commercial Register:               Managing Directors:
Amtsgericht Neuss HRB-NR 4207      Christian Riege
VAT Reg No.: DE120585842           Gabriele  Riege
                                   Johannes  Riege
..............................................................
           YOU CARE FOR FREIGHT, WE CARE FOR YOU          




------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list