Martin Boel, Silverbullet
2009-Sep-14 14:11 UTC
[CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2
Hi I would like to contribute to the wiki.centos.org: username: boel subject: nagios incompatibility with centos 5.2 location: http://wiki.centos.org/HowTos/Nagios content: A security feature of centos 5.2 SELinux prevents the access from the apache httpd server to the needed /var/nagios files. The error manifests itself in the /var/log/messages as "SELinux is preventing the tac.cgi from using potentially mislabeled files ./status.dat (var_t)". A workaround is to execute the command: chcon -R httpd_sys_content_t /var/nagios Please grant me access Regards Martin Boel
Ralph Angenendt
2009-Sep-14 14:15 UTC
[CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2
On Mon, 2009-09-14 at 16:11 +0200, Martin Boel, Silverbullet wrote:> Hi > > I would like to contribute to the wiki.centos.org: > username: boelHmmm. We really do prefer FirstnameLastname.> subject: nagios incompatibility with centos 5.2 > location: http://wiki.centos.org/HowTos/Nagios > content: A security feature of centos 5.2 SELinux prevents the access > from the apache httpd server to the needed /var/nagios files. The error > manifests itself in the /var/log/messages as "SELinux is preventing the > tac.cgi from using potentially mislabeled files ./status.dat (var_t)". A > workaround is to execute the command: chcon -R httpd_sys_content_t > /var/nagiosIs that still the case in 5.3? Ralph
Max Hetrick
2009-Sep-14 14:59 UTC
[CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2
Martin Boel, Silverbullet wrote:> Hi > > I would like to contribute to the wiki.centos.org: > username: boel > subject: nagios incompatibility with centos 5.2 > location: http://wiki.centos.org/HowTos/Nagios > content: A security feature of centos 5.2 SELinux prevents the access > from the apache httpd server to the needed /var/nagios files. The error > manifests itself in the /var/log/messages as "SELinux is preventing the > tac.cgi from using potentially mislabeled files ./status.dat (var_t)". A > workaround is to execute the command: chcon -R httpd_sys_content_t > /var/nagios >When I wrote the Nagios guide, it was easier and recommended to just turn SELinux off before going about installing and using Nagios. Seems that the Nagios doc site has some information now in regards to SELinux, but I never went back to visit that topic. <http://wiki.nagios.org/index.php/Selinux> Perhaps these can be incorporated into the guide if they are verified to work? Regards, Max
Martin Boel, Silverbullet
2009-Sep-15 07:21 UTC
[CentOS-docs] Contribution to wiki: nagios incompatibility with centos 5.2
Hi Thanks for you reply. I guess this should be fixed i the next nagios package or next centos version, but for now the public should be told about a workaround, that works with the current versions. There is quite a lot of work hours in this simple workaround, and some people may simply give up using this fantastic software. Please grant me access. Regards Martin Boel