LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 03-09-2007, 06:53 PM   #1
ille.pugil42
Member
 
Registered: Dec 2005
Distribution: Slackware
Posts: 151

Rep: Reputation: 30
Nagios contiually gives errors regarding 'audit' by the kernel


So, I recently reinstalled FC5 on my desktop computer, and all seemed to be working well. I had saved all my config scripts for just about everything, including nagios. I reinstalled nagios, as I have several times before, and setup everything as it should and then stopped using this computer directly, hence the reason why I didn't run into this problem until today. Nagios is *working*, in as much that it will email me when something goes down or comes back up, but it will not page me, no matter what, and so I started investigating. I got an error that I hadn't seen before, and its repeated several times inside the system log. Even worse, it clogs up all normal TTY's on the system; fortunately (or unfortunately) I'd been using SSH [long story] so I hadn't noticed until today when I got a new kvm switch.

here's an excerpt of /var/log/messages:
Code:
Mar 5 14:21:00 SystemName kernel: audit (1173133279.246:4): avc: denied (read) for pid=2241 comm="ping" name="nagios.cmd" dev=dm-0 ino=4163262 scontext=system_u:system_r:ping_t:s0 tcontect\system:u:object_r:usr_t:s0 tclass=fifo_file
Mar 5 14:22:15 SystemName kernel: audit (1173133335.306:5): avc: denied (read) for pid=2262 comm="ping" name="nagios.cmd" dev=dm-0 ino=4163262 scontext=system_u:system_r:ping_t:s0 tcontect\system:u:object_r:usr_t:s0 tclass=fifo_file
and this keeps going on and on and on... [so far about 4mb of this in text format] Is this some sort of a firewall setting inside the kernel no allowing the pings to go out? Did nagios just get borked up and need to be reinstalled?
 
Old 03-09-2007, 10:54 PM   #2
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 344Reputation: 344Reputation: 344Reputation: 344
You'll need to use the audit2allow command to generate a local SELinux policy to allow nagios to operate normally. The procedure for doing this is in the FC5 SELinux FAQ.
 
Old 03-12-2007, 02:37 PM   #3
ille.pugil42
Member
 
Registered: Dec 2005
Distribution: Slackware
Posts: 151

Original Poster
Rep: Reputation: 30
Thanks! That did the trick. I don't think we had SELinux installed last time.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Nagios and Oreon (Nagios web front end) installation and Configuration LXer Syndicated Linux News 1 05-31-2016 07:26 AM
Kernel Audit Support Unavaible error when booting after kernel upgrade abefroman Red Hat 2 03-21-2013 08:32 AM
LXer: Nagios 2.5 and Oreon 1.3 (Nagios web front end) installation with screenshots LXer Syndicated Linux News 0 08-11-2006 05:33 PM
/var/log/messages - kernel: audit(1107868785.573:0): avc: denied { getattr } lothario Linux - Security 2 02-10-2005 04:24 AM
Errors during filesystem check with one kernel while no errors with other kernel Potentials Linux - General 11 12-30-2003 04:24 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 04:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration