Re: selinux allow apache log access

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 17/06/15 15:27, Tim Dunphy wrote:
Try something like:
grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix
semodule -i zabbix.pp


Thanks for your response! However this is what happens when I try to
install the module:

  [root@monitor2:~] #semodule -i zabbix.pp
libsepol.print_missing_requirements: zabbix's global requirements were not
met: type/attribute zabbix_t (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file or
directory).
semodule:  Failed!


Any other thoughts?

Thanks,
Tim



That's because there's already a zabbix module loaded (the message isn't very informative!). I forgot that the received wisdom is to insert "my" in front of ones own modules i.e.:

grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix
semodule -i myzabbix.pp


--
regards

Harold Toms
http://iodine.chem.qmul.ac.uk
"Priestley's works... tended to unsettle every thing, and yet settled nothing."
- Samuel Johnson.

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux