audit2allow -a
grep zabbix policies template:
grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix.policies
Install policies:
semodule -i zabbix.policies.pp
All together:
audit2allow -a && grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix.policies && semodule -i zabbix.policies.pp && audit2allow -a
You have to execute this command multiple times. Sometimes you have to wait between these execution.At the end all lines shoud have
#!!!! This avc is allowed in the current policy
#============= zabbix_agent_t ==============
#!!!! This avc is allowed in the current policy
allow zabbix_agent_t ..................................;
#!!!! This avc is allowed in the current policy
allow zabbix_agent_t ...............................................;
#!!!! This avc is allowed in the current policy
allow zabbix_agent_t .....................................;
#!!!! This avc is allowed in the current policy
allow zabbix_agent_t ........................;
This method solves these cases:
Received value [Failed to get D-Bus connection: An SELinux policy prevents this sender from sending this message to this recipie
Received value [Failed to issue method call: Access denied0] is not suitable for value type [Numeric (unsigned)] and data type
No comments:
Post a Comment