search for: wackamole

...daemontools.html . My requirements is to use less systems daemon checks in nagios but concentrate more on business / application level checks . We have lots of daemons like below > 1. ) snmpd > 2.) ntp > 3.) SSH > 4.) crond > 5.) php-cgi > 6.) nginx > 7.) Postfix > 8.) wackamole > 9.) spread > 10.) atop > 11.) redis > 12.) taillog-dopa > 13.) taillog-user > 14.) rsyncd ... ETC. We use nagios checks + event-handlers in case of daemon failure . My views is to use daemontool to control all these daemons , and create a single nagios check which scans /se...

...ries su_exec_t again. The problem is once these are enabled with local policies they seem to be ignored producing the same avc's. Why are the initial avc's not generated in permissive allowing a complete policy to be derived? If they can't appear in permissive mode, even after playing wackamole with avc's one by one, there is no resolution as they continue to get denied. Anyone else seeing similar or know what I am missing? Bacula-fd runs as root/root. Thanks, jlc