SELinux is preventing /usr/lib64/sa/sadc from getattr access on the directory /var/log/audit
Issue
- SELinux is preventing
/usr/lib64/sa/sadcfromgetattraccess on the directory/var/log/audit - After updating from RHEL 7.5 to 7.6, SELinux denials start to appear when the
/etc/cron.d/sysstatcron job attempts to run/usr/lib64/sa/sa1
Environment
Red Hat Enterprise Linux 7.6
/var/log/audit as a separate filesystem
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.