setroubleshootd进程引起内存不足，selinux导致zabbix_agent没有权限
问题现象top查看进程setroubleshootd内存使用率会到90%以上查看message日志[root@L-DB-128-104 ~]# tail -220f /var/log/messagesApr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from...
·
问题现象
top查看进程
setroubleshootd内存使用率会到90%以上
查看message日志
[root@L-DB-128-104 ~]# tail -220f /var/log/messages
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l f8f36d26-e88b-4a2b-9b19-7a9bef751202
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l f8f36d26-e88b-4a2b-9b19-7a9bef751202
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from getattr access on the file /proc/<pid>/status. For complete SELinux messages. run sealert -l 82a06995-e8f8-43a1-894e-61e40a36d9db
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l cbbf5d0f-46c6-403e-b02e-59c1a0d1a859
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l cbbf5d0f-46c6-403e-b02e-59c1a0d1a859
处理方法
# ausearch -c 'zabbix_agentd' --raw | audit2allow -M my-zabbixagentd
******************** IMPORTANT ***********************
To make this policy package active, execute:
semodule -i my-zabbixagentd.pp
# semodule -i my-zabbixagentd.pp
更多推荐
0
0- 0
已为社区贡献1条内容
所有评论(0)