Hi Jason,
> This means SELinux is ON in a kind of testing mode. It is only reporting
> what would be blocked and not "enforcing" anything. So the messages are
> basically informing you that you WILL have problems IF you enable enforcing
> mode.
> Checking AppDynamic PHP agent it does not support SELinux (which is
> insanely poor for the license cost!) so best you can do is ignore the
> messages. It may be better to contact their support channels for help too
> rather then here if you need any more.
> Disabling SELinux completely should stop the messages appearing
> completely, though I advise against anything but enforcing mode
OK thanks. That makes complete sense. I do plan on enabling SELinux
enforcing mode soon! And I find it more than a little surprising that the
appdynamics php agent won't support SELinux. I'll have to bring this up to
them, we have a pretty big account with them.
Thanks!
Tim
On Tue, May 12, 2015 at 1:47 AM, Jason Woods <devel@xxxxxxxxxxxxxxxx> wrote:
>
> > On 12 May 2015, at 03:39, Tim Dunphy <bluethundr@xxxxxxxxx> wrote:
> > ***** Plugin catchall_labels (83.8
> > confidence) suggests *******************...
> > May 11 22:31:38 web1 python[14832]: SELinux is preventing
> > /usr/lib/appdynamics-php5/proxy/jre/bin/java from block_suspend access on
> > the capability2 Unknown.
>
> > Why is that odd? Well mainly because I have SELinux off at the moment.
> >
> > [root@web1:~] #getenforce 0
> > Permissive
>
> This means SELinux is ON in a kind of testing mode. It is only reporting
> what would be blocked and not "enforcing" anything. So the messages are
> basically informing you that you WILL have problems IF you enable enforcing
> mode.
>
> Checking AppDynamic PHP agent it does not support SELinux (which is
> insanely poor for the license cost!) so best you can do is ignore the
> messages. It may be better to contact their support channels for help too
> rather then here if you need any more.
>
> Disabling SELinux completely should stop the messages appearing
> completely, though I advise against anything but enforcing mode.
>
> Jason
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
>
--
GPG me!!
gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
