Skip to main content

Being the first of the month is was time for me to run my regular updates for my Centreon VMs.  This is  running AlmaLinux 8.10 Kernel 4.18.0-553.60.1.e18_10.x86_64 and Centreon Version 24.04.15 after the new update and it has broken all of my monitoring.  Execute command failed is the error that I am seeing in the status page.  I have rebooted the machine with no change.  Some googling came up with making sure SELinux was disabled.  Initially it was not, but I did change that, rebooted the system again and still getting the same error.

Fortunately this is a VM and I did take a snapshot prior to updating so was able to restore functionality quickly.  Did some more research, ran the update again, but still the same result.  Anyone else run into the same issue?  Or would have any further thoughts on what I should check?

The command that is running is

/usr/lib64/nagios/plugins/check_icmp

-H x.x.x.x

-n 5

-w 200,20%

-c 400,50% 

SELinux was disabled.  Initially it was not, but I did change that, rebooted the system again

 

Can you clarify the actions you did to disable SELinux ? If you only did "setenforce 0” then this disaprears after a reboot. You would need to edit the /etc/selinux/config file for that.


Aside of this, you are only doing a check_icmp, i don’t see how this would be blocked by selinux (i believe at list).

Can you tail the /var/log/audit/audit.log and check it’s content after running the command to see if there is some selinux or securities blocking your command.

Same problem after upgrade today Centreon VM Alma 8 Centreon 24.04.15

Typical message in  /var/log/audit/audit.log

 

ype=AVC msg=audit(1754460124.345:1720919): avc:  denied  { name_connect } for  pid=1305189 comm="httpd" dest=9042 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1

 

SElinux in permissive mode. No effect set to disable

 

Typical message in  /var/log/audit/audit.log

 

ype=AVC msg=audit(1754460124.345:1720919): avc:  denied  { name_connect } for  pid=1305189 comm="httpd" dest=9042 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1

 

SElinux in permissive mode. No effect set to disable

 

Then probably not SELINUX related. No real idea of what is causing it 😐

Reply


Terms & ConditionsCookie settings