zabbix agent?

[lejeczek via selinux <selinux@xxxxxxxxxxxxxxxxxxxxxxx>]

    Hi guys.
      
      Zabbix on Centos anyone?
      I'm on Centos 9 with:
      zabbix-agent-6.0.39-1.el9.x86_64
      zabbix-server-6.0.39-1.el9.noarch
      zabbix-selinux-6.0.39-1.el9.noarch
      with some SE denials:
      ...
      SELinux is preventing /usr/bin/who from connectto access on the
      unix_stream_socket /run/systemd/userdb/io.systemd.DynamicUser. For
      complete SELinux messages run: sealert -l
      d7152358-4998-4950-aec4-fb9e5b0e7b49
      
      allow zabbix_agent_t kernel_t:unix_stream_socket connectto;
      
      and I wonder if perhaps someone has seen it before and knows if
      this is can be helped with zabbix's config?
      Or if not - should a policy addition allow that 'agent' is asking
      for ? though Zabbix - from EPEL - comes with its own policies.
      
      thanks, L.
    
  

-- 
_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue