mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
Change SELinux context for logs (#14128)
Change SELinux context for logs from httpd_sys_rw_content_t to httpd_log_t so logrotate is not blocked by SELinux with this blocking: `logrotate_t httpd_sys_rw_content_t:file open;`
This commit is contained in:
@@ -419,7 +419,8 @@ Feel free to tune the performance settings in librenms.conf to meet your needs.
|
||||
|
||||
```
|
||||
semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/html(/.*)?'
|
||||
semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/(logs|rrd|storage)(/.*)?'
|
||||
semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/(rrd|storage)(/.*)?'
|
||||
semanage fcontext -a -t httpd_log_t "/opt/librenms/logs(/.*)?"
|
||||
semanage fcontext -a -t bin_t '/opt/librenms/librenms-service.py'
|
||||
restorecon -RFvv /opt/librenms
|
||||
setsebool -P httpd_can_sendmail=1
|
||||
|
Reference in New Issue
Block a user