munin-node ignores permissions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I have a fedora22 system with munin-2.0.25 and have a few modules that
I just can't get to work. They all respond with some form of
"permission denied". I've disabled SELinux (security=0), and I've
checked all permissions as the user running the script.

2015/12/29-21:34:48 [3814] Error output from bind9_rndc:
2015/12/29-21:34:48 [3814]      rndc: error: open: /etc/rndc.key:
permission denied
2015/12/29-21:34:48 [3814]      rndc: could not load rndc configuration
2015/12/29-21:34:48 [3814]      /etc/munin/plugins/bind9_rndc:
/var/named/chroot/var/named/data/named.stats: Permission denied

If I change /etc/rndc.key to 644, it runs fine.

The contents of /etc/munin/plugin-conf.d/munin-node:

[bind9_rndc]
  user named
  group named
  env.querystats /var/named/chroot/var/named/data/named.stats
  env.rndc /usr/sbin/rndc
  env.graph_args --upper-limit 100 -l 0
  env.graph_scale no
  env.graph_vlabel %

I added a system() to bind9_rndc:

system("id > /tmp/123.out");

It creates the file owned by named with group nobody, despite "group
named" above. The contents of the file are:

uid=25(named) gid=99(nobody) groups=99(nobody),25(named)

Why is it ignoring the "group named" above? I've even tried creating
the config file as /etc/munin/plugin-conf.d/bind9_rndc and it still
seems to ignore it. Is that the proper place and format for it?

I have another virtually identically fc22 munin-2.0.25 system with the
same config files and it's not having a problem.

Any ideas greatly appreciated.
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux