Hello,

I'm trying to run Nagios 3.0.6 on CentOS 5.2 with SELinux in enforcing mode but it is not working.

I'm using the following packages: httpd-2.2.3-11.el5_2.centos.4 nagios-3.0.6-1.el5.rf nagios-plugins-1.4.12-1.el5.rf

I followed the steps bellow to try to create a selinux policy to Nagios but it is failing.

Any help, please?

# setenforce Permissive

# service nagios start

# service httpd start

# grep nagios /var/log/audit/audit.log | audit2allow -M nagios ******************** IMPORTANT *********************** To make this policy package active, execute:

semodule -i nagios.pp

# semodule -i nagios.pp libsepol.print_missing_requirements: nagios's global requirements were not met: type/attribute nagios_t libsemanage.semanage_link_sandbox: Link packages failed semodule: Failed!

# cat nagios.te module nagios 1.0;

require { type nagios_t; type sbin_t; type ping_t; type initrc_var_run_t; type var_t; type httpd_nagios_script_t; class dir { read write search add_name remove_name }; class fifo_file { write getattr read create }; class file { rename setattr read create write getattr unlink }; }

#============= httpd_nagios_script_t ============== allow httpd_nagios_script_t var_t:fifo_file { write getattr }; allow httpd_nagios_script_t var_t:file { read getattr };

#============= nagios_t ============== allow nagios_t initrc_var_run_t:file write; allow nagios_t sbin_t:dir search; allow nagios_t var_t:dir { read write add_name remove_name }; allow nagios_t var_t:fifo_file { read write create getattr }; allow nagios_t var_t:file { rename write getattr setattr read create unlink };

#============= ping_t ============== allow ping_t var_t:file { read write };

Cordially, cviniciusm.