Confirm with:
grep -Ei "denied" /var/log/audit/audit.log
Fix with:
grep AVC /var/log/audit/audit.log | audit2allow -M systemd-allow;
semodule -i systemd-allow.pp
Might need to rerun the above a few times. New denied entries can pop up
after solving initial ones.
Cheers,
TK
On 2/27/2020 7:46 PM, Frank Filz wrote:
Ok, you’re probably hitting some selinux issues.
I’m not familiar with the policies for selinux but I know folks have
been working on some.
Kaleb, can you help here?
Frank
*From:*Satish Chandra Kilaru [mailto:iam.kilaru@gmail.com]
*Sent:* Thursday, February 27, 2020 4:21 PM
*To:* Frank Filz <ffilzlnx(a)mindspring.com>
*Cc:* support(a)lists.nfs-ganesha.org
*Subject:* Re: [NFS-Ganesha-Support] nfs-ganesha exits with "Error:
couldn't complete write to the log file " error on screen
SELINUX=enforcing
SELINUXTYPE=targeted
/usr/bin/ganesha.nfsd -f /etc/ganesha/ganesha.conf -L /tmp/ganesha.log
-N NIV_INFO
started as root
On Thu, Feb 27, 2020 at 7:15 PM Frank Filz <ffilzlnx(a)mindspring.com
<mailto:ffilzlnx@mindspring.com>> wrote:
> Error: couldn't complete write to the log file /tmp/ganesha.log
status=13
> (Permission denied) message was:
> 27/02/2020 13:37:28 : epoch 5e583698 :
m4hcadev1.commvault.com
<
http://m4hcadev1.commvault.com> :
> ganesha.nfsd-32262[main] main :MAIN :EVENT :ganesha.nfsd
Starting: Ganesha
> Version /root/rpmbuild/BUILD/nfs-ganesha, built at Oct 29 2019
17:39:50 on
> localhost
>
> it successfully created ganesha.log as below. But failed to write
to it with
> Permission Denied error.
> -rw-rw-r--. 1 root root 0 Feb 27 13:31 ganesha.log
>
> What could be the problem?
How are you starting Ganesha? Are you running in a container or
anything like that? Is Ganesha running as root (seems like it would
have to be to create the log file as root)? Do you have selinux
running in restrictive mode?
Frank
--
Please Donate to
www.wikipedia.org <
http://www.wikipedia.org>
_______________________________________________
Support mailing list -- support(a)lists.nfs-ganesha.org
To unsubscribe send an email to support-leave(a)lists.nfs-ganesha.org