Re: selinux allow apache log access

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



>
> Try something like:
> grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix
> semodule -i zabbix.pp



Thanks for your response! However this is what happens when I try to
install the module:

 [root@monitor2:~] #semodule -i zabbix.pp
libsepol.print_missing_requirements: zabbix's global requirements were not
met: type/attribute zabbix_t (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file or
directory).
semodule:  Failed!


Any other thoughts?

Thanks,
Tim

On Wed, Jun 17, 2015 at 5:32 AM, Harold Toms <h.toms@xxxxxxxxxx> wrote:

> Try something like:
>
> grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix
> semodule -i zabbix.pp
>
>
> On 16/06/15 15:58, Tim Dunphy wrote:
>
>> Hey guys,.
>>
>>   I have a centos 7 machine I'm using as a zabbix server. And I noticed
>> that
>> apache won't start, with this complaint in the error log:
>>
>> (13)Permission denied: AH00091: httpd: could not open error log file
>> /var/log/zabbix_error_log.
>> AH00015: Unable to open logs
>>
>>
>> I tried having a look at audit2allow and this is the response I get back:
>>
>> [root@monitor2:/etc/httpd] #grep http /var/log/audit/audit.log |
>> audit2allow
>>
>>
>> #============= httpd_t ==============
>> allow httpd_t zabbix_log_t:file open;
>>
>> How can I turn that bit of information into a rule that allows apache
>> access to this zabbix log file?
>>
>> I notice that if I disable selinux using setenfor 0, apache starts up
>> without complaint. But I would rather not leave it disabled.
>>
>> Thanks,
>> Tim
>>
>>
>
> --
> regards
>
> Harold Toms
> http://iodine.chem.qmul.ac.uk
> "Priestley's works... tended to unsettle every thing, and yet settled
> nothing."
> - Samuel Johnson.
>
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
GPG me!!

gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux