setroubleshootd进程引起内存不足，selinux导致zabbix_agent没有权限

最新推荐文章于 2022-06-10 15:36:58 发布

hellkite

最新推荐文章于 2022-06-10 15:36:58 发布

阅读量2.7k

点赞数

分类专栏：运维文章标签： setroubleshootd zabbix_agent

本文链接：https://blog.csdn.net/hellkite/article/details/89532898

版权

运维专栏收录该内容

1 篇文章 0 订阅

订阅专栏

问题现象

top查看进程

setroubleshootd内存使用率会到90%以上

查看message日志

[root@L-DB-128-104 ~]# tail -220f /var/log/messages
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l f8f36d26-e88b-4a2b-9b19-7a9bef751202
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l f8f36d26-e88b-4a2b-9b19-7a9bef751202
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from getattr access on the file /proc/<pid>/status. For complete SELinux messages. run sealert -l 82a06995-e8f8-43a1-894e-61e40a36d9db
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l cbbf5d0f-46c6-403e-b02e-59c1a0d1a859
Apr 26 09:48:45 L-DB-128-104 setroubleshoot: SELinux is preventing /usr/sbin/zabbix_agentd from read access on the file cmdline. For complete SELinux messages. run sealert -l cbbf5d0f-46c6-403e-b02e-59c1a0d1a859

处理方法

# ausearch -c 'zabbix_agentd' --raw | audit2allow -M my-zabbixagentd
******************** IMPORTANT ***********************
To make this policy package active, execute:

semodule -i my-zabbixagentd.pp

# semodule -i my-zabbixagentd.pp