fix(lvm): Add --nolocking to LVM commands

radiorabe / rabe-zabbix

Collection of various Zabbix templates and helper scripts created or used by Radio Bern RaBe

https://radiorabe.github.io/rabe-zabbix/

GNU Affero General Public License v3.0

105 stars 61 forks source link

fix(lvm): Add --nolocking to LVM commands #102

Open paraenggu opened 10 months ago

paraenggu commented 10 months ago

Adding --nolocking to the LVM commands to prevent SELinux denies on newer CentOS systems

type=AVC msg=audit(1704540662.912:347107): avc:  denied  { write } for  pid=504392 comm="pvs" name="D_system.devices" dev="tmpfs" ino=19738 scontext=system_u:system_r:zabbix_agent_t:s0 tcontext=system_u:object_r:lvm_lock_t:s0 tclass=file permissive=0

hairmare commented 10 months ago

What are "newer CentOS systems" in this context?