sh: /usr/local/rrdtool/bin/rrdtool: Permission denied

[cpmonkey]

Hello. Newbie to caciti, but not linux. Does anyone know how to resolve this?

1. Ran the previous post. 2/2005 "RRDTool Says /usr/local/bin/: permission denied"

2. Tried chown'ing the file between root, apache, cactiuser, etc. + service httpd restart

3. compile dir is:
# ll
total 100
-rwxr-xr-x 1 root root 40754 Aug 16 15:49 rrdcgi
-rwxr-xr-x 1 root root 4921 Aug 16 15:49 rrdtool
-rwxr-xr-x 1 root root 40591 Aug 16 15:49 rrdupdate
# pwd
/usr/local/rrdtool/bin

4. tail messages
Aug 17 12:27:19 oholuty5 kernel: audit(1155835639.489:574): avc: denied { execute } for pid=7839 comm="sh" name="rrdtool" dev=cciss/c0d0p3 ino=28147715 scontext=root:system_r:httpd_sys_script_t tcontext=root:object_r:usr_t tclass=file

5. in /var/log/httpd/ # tail error_log
sh: /usr/local/rrdtool/bin/rrdtool: Permission denied
sh: /usr/local/rrdtool/bin/rrdtool: Permission denied

Looking for any guidance ; will check anything.

[BSOD2600]

Moving to the proper forum.

[fmangeant]

Hi

is SELinux enabled on this host ?

[cpmonkey]

It is a RedHat platform, Enterprise Linux.

uname -a
Linux oholuty5.oxy.com 2.6.9-22.ELsmp #1 SMP Mon Sep 19 18:32:14 EDT 2005 i686 athlon i386 GNU/Linux

I was thinking about maybe an earlier version of rrdtools. I am running out of ideas to throw. I am trying rrdtool-1.2.14

Yesterday, I compiled the rrdtools with this string, but I still got the same message.

./configure --with-rrdtool=/usr/local/rrdtool/bin/rrdtool --with-mysql-lib-dir=/usr/lib/mysql/ --with-net-snmp

I really appreciate the look-over.

[fmangeant]

To see if SELinux is enabled :

Code: Select all

$ grep ^SELINUX /etc/selinux/config
SELINUX=disabled

You should install an RRDtool RPM from this repository : http://dag.wieers.com/packages/rrdtool/

[cpmonkey]

grep ^SELINUX /etc/selinux/config
SELINUX=enforcing
SELINUXTYPE=targeted

Shoulkd I kill it (vi the config file)?

[fmangeant]

See this thread : http://forums.cacti.net/about7759.html

[cpmonkey]

That was it, we changed the config file and now it works great.

/etc/selinux/config

Thank you, that was a very big help. I have not messed with selinux file before, so I would never have found it without your help.

I really appreciate it!

[bloodrayne]

Just a quick tip from a linux user ...

SElinux will cause you a LOT of problem like this one ... it's a better idea to deactivate it...