zabbix agent?

lejeczek via selinux <[email protected]> Wed, 18 Jun 2025 15:34:14 +0200
Newsgroups	gmane.linux.redhat.fedora.selinux
Message-ID	<[email protected]>
This is a multi-part message in MIME format.
--===============4379341914540468870==
Content-Type: multipart/alternative;
 boundary="------------J0d58QpR0AhP9ZMEA27nt2hU"
Content-Language: en-US, pl, pl-PL

This is a multi-part message in MIME format.
--------------J0d58QpR0AhP9ZMEA27nt2hU
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Hi guys.

Zabbix on Centos anyone?
I'm on Centos 9 with:
zabbix-agent-6.0.39-1.el9.x86_64
zabbix-server-6.0.39-1.el9.noarch
zabbix-selinux-6.0.39-1.el9.noarch
with some SE denials:
...
SELinux is preventing /usr/bin/who from connectto access on 
the unix_stream_socket 
/run/systemd/userdb/io.systemd.DynamicUser. For complete 
SELinux messages run: sealert -l 
d7152358-4998-4950-aec4-fb9e5b0e7b49

allow zabbix_agent_t kernel_t:unix_stream_socket connectto;

and I wonder if perhaps someone has seen it before and knows 
if this is can be helped with zabbix's config?
Or if not - should a policy addition allow that 'agent' is 
asking for ? though Zabbix - from EPEL - comes with its own 
policies.

thanks, L.
--------------J0d58QpR0AhP9ZMEA27nt2hU
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <font size="2" face="Courier 10 Pitch">Hi guys.<br>
      <br>
      Zabbix on Centos anyone?<br>
      I'm on Centos 9 with:<br>
      zabbix-agent-6.0.39-1.el9.x86_64<br>
      zabbix-server-6.0.39-1.el9.noarch<br>
      zabbix-selinux-6.0.39-1.el9.noarch<br>
      with some SE denials:<br>
      ...<br>
      SELinux is preventing /usr/bin/who from connectto access on the
      unix_stream_socket /run/systemd/userdb/io.systemd.DynamicUser. For
      complete SELinux messages run: sealert -l
      d7152358-4998-4950-aec4-fb9e5b0e7b49<br>
      <br>
      allow zabbix_agent_t kernel_t:unix_stream_socket connectto;<br>
      <br>
      and I wonder if perhaps someone has seen it before and knows if
      this is can be helped with zabbix's config?<br>
      Or if not - should a policy addition allow that 'agent' is asking
      for ? though Zabbix - from EPEL - comes with its own policies.<br>
      <br>
      thanks, L.<br>
    </font>
  </body>
</html>

--------------J0d58QpR0AhP9ZMEA27nt2hU--

--===============4379341914540468870==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
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=

--===============4379341914540468870==--