Version python2-collectd_cvmfs-1.0.2-1.el7.1 CentOS 7 cvmfs-2.

<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clip

collectd not able to mount cvmfs if selinux is in place about collectd-cvmfs HOT 2 OPEN

cvmfs commented on September 26, 2024

collectd not able to mount cvmfs if selinux is in place

from collectd-cvmfs.

Comments (2)

traylenator commented on September 26, 2024

module collectd_cvmfs 1.0;

require {
        type collectd_t;
        type fusefs_t;
        class dir read;
}

but not the whole story. I now see

[2018-07-04 14:37:28] cvmfs: failed to get MountTime for repo cms.cern.ch

but no avc records.,..

from collectd-cvmfs.

luisfdez commented on September 26, 2024

policy_module(collectdcvmfs 1.2);

gen_require(`
    type collectd_t;
    type fusefs_t;
    class dir { read };
')

allow collectd_t fusefs_t:dir { read };

That works for me if all the config is set (including pointing to the typedb).

Enabling dontaudit rules I see as well:

type=AVC msg=audit(1531298857.953:511): avc:  denied  { read } for  pid=18741 comm="collectd" path="/var/db/nscd/hosts" dev="vda1" ino=25798084 scontext=system_u:system_r:collectd_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=file

But I think that one is not connected to this use case.

from collectd-cvmfs.

Recommend Projects