[Bug]Puppet throwing selinux errors in /var/log/messages
環境
- Red Hat Satellite 6.x
問題
- Puppet throwing selinux errors in
/var/log/messages. - When running
puppet agent --teston a client there will be HTTP error:
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
-In journalctl SYSLOG_IDENTIFIER=puppet-master you can see the selinux errors:
Jul 27 13:10:00 puppet-master[2671]: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_var_lib_t:s0
Jul 27 13:10:01 puppet-master[2671]: failed to set mode 644 on /var/log/puppet/masterhttp.log: Permission denied - /var/log/puppet/masterhttp.log
Jul 27 13:10:01 puppet-master[2671]: (/File[/var/log/puppet/masterhttp.log]/mode) change from 0644 to 0660 failed: failed to set mode 644 on /var/log/puppet/masterhttp.log: Permission denied - /var/log/puppet/masterhttp.
Jul 27 13:10:01 puppet-master[2671]: Could not prepare for execution: Got 1 failure(s) while initializing: File[/var/log/puppet/masterhttp.log]: change from 0644 to 0660 failed: failed to set mode 644 on /var/log/puppet/
解決策
- There is a Bug filed foe Puppet throwing selinux errors in /var/log/messages.
- Workaround for now is to disable the selinux for
puppet agent.
# semanage permissive -a puppetagent_t
- Please open a Support ticket to get further updates on BUgzilla.
このソリューションは、Red Hat のエンジニアがお客様のサポート中に作成したナレッジコンテンツの大型ライブラリーを提供する Fast-Track Publication Program の一環です。お客様が必要とする知識・情報を即時に提供するために、これらの記事は、未処理・未編集の状態で提示される場合がありますので、予めご了承ください。
コメント