Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow external script execution with SE Linux #441

Closed
tux-o-matic opened this issue Sep 5, 2017 · 3 comments
Closed

Allow external script execution with SE Linux #441

tux-o-matic opened this issue Sep 5, 2017 · 3 comments

Comments

@tux-o-matic
Copy link
Contributor

The current SE Linux module doesn't seem to be enough to let the Zabbix agent execute scripts.

allow zabbix_t zabbix_script_exec_t : file { ioctl read getattr execute open } ;

And the File resource agent::includedir should probably get the right selinux parameters for the rule to apply.
@bastelfreak
Copy link
Member

Hi @tux-o-matic, thanks for this request. Are you able to provide a patch for this?

@tux-o-matic
Copy link
Contributor Author

tux-o-matic commented Sep 5, 2017 •
edited
Loading

The Zabbix ticket is still opened, I'm only testing on EL 7.3 and 7.4 so I'm not sure where we stand.

@tux-o-matic
Copy link
Contributor Author

A lead maybe:
https://bugzilla.redhat.com/show_bug.cgi?id=1380697

tux-o-matic pushed a commit to tux-o-matic/puppet-zabbix that referenced this issue Sep 26, 2017
Add support for templated SE Linux agent module (Fix voxpupuli#441)
d401a21
tux-o-matic pushed a commit to tux-o-matic/puppet-zabbix that referenced this issue Sep 26, 2017
Add support for templated SE Linux agent module (Fix voxpupuli#441)
acad705
@tux-o-matic tux-o-matic mentioned this issue Sep 26, 2017
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@bastelfreak @tux-o-matic