greatcare / pm2-zabbix

A Node.js PM2 monitoring tool for Zabbix.
MIT License
87 stars 60 forks source link

SELinux is preventing /usr/bin/sudo from connectto access on the unix_stream_socket /run/dbus/system_bus_socket. #39

Open blueflametuna opened 4 years ago

blueflametuna commented 4 years ago

Raw Audit Messages type=AVC msg=audit(1573184726.101:864): avc: denied { connectto } for pid=17463 comm="sudo" path="/run/dbus/system_bus_socket" scontext=system_u:system_r:zabbix_agent_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=0

Also related: SELinux is preventing /usr/bin/node from write access on the sock_file rpc.sock.

Raw Audit Messages type=AVC msg=audit(1573184726.86:862): avc: denied { write } for pid=17465 comm="node" name="rpc.sock" dev="dm-0" ino=50787429 scontext=system_u:system_r:zabbix_agent_t:s0 tcontext=unconfined_u:object_r:var_log_t:s0 tclass=sock_file permissive=0

Can this be resolved with a simple context change, or do I need to install new policy modules?