Re: selinux allow apache log access

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



>
> That's because there's already a zabbix module loaded (the message isn't
> very informative!). I forgot that the received wisdom is to insert "my" in
> front of ones own modules i.e.:
> grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix
> semodule -i myzabbix.pp



Hmm no luck there either:

[root@monitor2:~] #semodule -i myzabbix.pp
*semodule:  Failed on myzabbix.pp!*

I also tried:

[root@monitor2:~] #semodule -i my_zabbix
semodule:  Failed on my_zabbix!

And

[root@monitor2:~] #semodule -i my-zabbix
semodule:  Failed on my-zabbix!

Just in case.. none of that worked.


Got any other ideas? :)

Tim


On Wed, Jun 17, 2015 at 11:24 AM, Harold Toms <h.toms@xxxxxxxxxx> wrote:

> On 17/06/15 15:27, Tim Dunphy wrote:
>
>> Try something like:
>>> grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix
>>> semodule -i zabbix.pp
>>>
>>
>>
>> Thanks for your response! However this is what happens when I try to
>> install the module:
>>
>>   [root@monitor2:~] #semodule -i zabbix.pp
>> libsepol.print_missing_requirements: zabbix's global requirements were not
>> met: type/attribute zabbix_t (No such file or directory).
>> libsemanage.semanage_link_sandbox: Link packages failed (No such file or
>> directory).
>> semodule:  Failed!
>>
>>
>> Any other thoughts?
>>
>> Thanks,
>> Tim
>>
>>
>>
> That's because there's already a zabbix module loaded (the message isn't
> very informative!). I forgot that the received wisdom is to insert "my" in
> front of ones own modules i.e.:
>
> grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix
> semodule -i myzabbix.pp
>
>
>
> --
> regards
>
> Harold Toms
> http://iodine.chem.qmul.ac.uk
> "Priestley's works... tended to unsettle every thing, and yet settled
> nothing."
> - Samuel Johnson.
>
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
GPG me!!

gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux