SELinux for Zabbix

Base on post from https://www.zabbix.com/forum/zabbix-help/367261-selinux-and-zabbix

Install:

yum install policycoreutils-python

Generate custom SELinux plicy file for Zabbix

grep zabbix_t /var/log/audit/audit.log | audit2allow -M zabbix_server_custom

Load new policy

semodule -i zabbix_server_custom.pp

There is possibility that the server will not start correctly. Repeat above steps several times until server start correctly

Remove policy

rm zabbix_server_custom.*

Review setting

getsebool -a | grep zabbix

Permanently enable them if needed

setsebool -P zabbix_can_network=1

Leave a Reply

Your email address will not be published. Required fields are marked *