similar to: Selinux issues with 7.1 update

Hi list, I'm studying SELinux on my workstation and for this I've enforced. In a first time selinux was permissive and when switched to enforcing I had relabel some things. Due to my "nescience" about selinux and what I must configure, I'm waiting avc denied for specified services. Until today, I've configured successfully httpd, smbd. Today I've noticed that my

I updated my backup server to CentOS 6.6 this morning. As usual, I unmounted the current (nightly) tape from the changer before the reboot. Now Bacula complains it cannot access the changer: 3301 Issuing autochanger "loaded? drive 0" command. 3991 Bad autochanger "loaded? drive 0" command: ERR=Child exited with code 1. Results=cannot open SCSI device '/dev/changer' -

On 07/05/2016 08:21 AM, Alessandro Baggi wrote: > What are the meaning of rules on pol.te https://wiki.centos.org/HowTos/SELinux The CentOS howto has some information, and links to additional resources. The policy should be pretty easy to read, though. You have one rule, "allow bacula_t systemd_systemctl_exec_t:file execute." Each word in that rule, except for "allow"

Hey folks, Ok so I'm having another issue with SELinux. However I think I'm pretty close to a solution and just need a nudge in the right directtion. I wrote a puppet module that gets systems into bacula backups. Part of the formula is to distribute key/cert pairs with permissions that allow bacula to read them so that bacula can talk to the host over TLS. It's pretty slick, I must

Hi list, I'm trying to understand SELinux on C7. I encountered problem running bacula when system is enforced. The problem is when bacula try to run BeforeJobScript. In this script there is an occourrence to systemctl stop httpd and hostname command and I got error on permission on this 2 commands. Reading RHEL 7 SELinux Guide seems that I need a domain transaction but I don't know how

Two issues: first, I've noticed a number of times that selinux is there, which we usually have in permissive, but setroubleshoot is *not* installed. Is there be some kind of dependency or group that it should be part of that's missing? I don't see why I need to manually install it.... Second - and I thought I knew the answer to this, but guess I don't - I see AVC's in the log

I posted this in the Bacula list without success so I hope I might have some luck here. Btape and mt can access my DDS-3 Seagate Archive Python 06480-xxx tape drive but Bacula tray-mon ends up finally stating that it cannot open device /dev/nst0? That is the device string that I use to access the drive, oddly enough it also suggest the SD could not open the one file based storage location I have

Hey guys, Quick update. I grepped through the output of getsebool -a to see that related to puppet. And I found this setting: puppetagent_manage_all_files. So I tried running this command: setsebool -P puppetagent_manage_all_files 0 And did a restorecon on my modules directory: restorecon -R -v environments/production/moudles So there's good news and bad news to report! It seems that

We are migrating an LTO2 library off Veritas and NTBackup on a Windows Server to a Linux Server with either Bacula or Amanda. Originally, the Windows server used scripts to sync changes from various other Windows servers using Robocopy to a locally attached set of volumes, then ran the backup nightly (Full's were always done). I now had hoped to rsync the Samba shares to a local replica on

Hi advisors , I would some suggestions on using http://cr.yp.to/daemontools.html . My requirements is to use less systems daemon checks in nagios but concentrate more on business / application level checks . We have lots of daemons like below > 1. ) snmpd > 2.) ntp > 3.) SSH > 4.) crond > 5.) php-cgi > 6.) nginx > 7.) Postfix > 8.) wackamole > 9.) spread >

Anyone else notice that /usr/libexec/bacula/make_catalog_backup.pl runs a "dbcheck -B" which doesn't seem to exist in the version of dbcheck shipped with it? # strings /usr/sbin/dbcheck |grep -i print sprintf vfprintf snprintf -dt print timestamp in debug output -? print this message %d block read errors not printed. That makes it rather

I have no idea of the current dependency problem. I think your original problem was caused by mv'ing files from an nfs share to /etc which maintained the context. And SELinux prevented puppet from accessing nfs_t type. If you had just run restorecon on the object it would have set it back to the correct/default context. You might want to setup an alias mv "mv -Z" This changes

Hi all, Thanks for all your suggestions. Here's where I'm at with this. Can you give details about your puppetmasterd setup ? it seems that > you're using Foreman as puppet ENC. > Yes, I'm on foreman 1.7.4 and puppet 3.75. You are correct that I'm using foreman, sorry I hadn't thought to mention it! > Foreman works fine with selinux enabled : that's what

Hi list, I try to install bacula-client-3.0.1-3.el5.pp.x86_64.rpm but have problems with some Dependencies, please if anyone know how fix that I'll apreciate the info. yum install bacula-client-3.0.1-3.el5.pp.x86_64.rpm Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * epel: www.gtlib.gatech.edu * rpmforge: ftp-stud.fht-esslingen.de * base: centos.pop.com.br *

CentOS Errata and Bugfix Advisory 2012:1469 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7b52c666fc603f620e273dcbba5a43bad621826f9e2520cca6f064ecd5cef03c bacula-client-5.0.0-12.el6.i686.rpm

CentOS Errata and Bugfix Advisory 2015:0239 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0239.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: de15a060812e939050e6d9672e167f81ed6474aba93d283dea0f07a176951407 bacula-client-5.0.0-13.el6.i686.rpm

I tried to install the latest bacula last night, rebuilding from the source rpm ... this is the command line I used, following the instructions at bacula.org: # rpmbuild --rebuild --define "build_centos4 1" \ --define "build_x86_64 1" --define "build_mysql4 1" bacula-1.39.26-1.src.rpm but the rebuild fails, citing all sorts of dependencies being required. problem

Hi everyone, I''ve been working on a module for bacula, and I''m having a problem requiring resources I''ve defined in other modules. At the moment, I have the following (simplified): /etc/puppet/modules/bacula/manifests/init.pp: class bacula { ... define configure ( $gui="true", $db_password ) { ... postgresql::create_db {

Send CentOS-announce mailing list submissions to centos-announce at centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request at centos.org You can reach the person managing the list at centos-announce-owner at centos.org When

Hi, i have a lot of entries in my logs which i can't solve, but everything works as expected. my setup: samba pdc - bacula samba bdc - mule Ubuntu 10.04-LTS Server samba 3.4.7 log file entries: Aug 1 08:25:40 bacula smbd[23854]: canonicalize_connect_path failed for service alex, path /\\mule\alex Aug 1 08:25:41 bacula smbd[23854]: [2012/08/01 08:25:41, 0]