[CentOS] appdynamics php agent prevented by SELinux

[Tim Dunphy]

Hi Jason,


> This means SELinux is ON in a kind of testing mode. It is only reporting
> what would be blocked and not "enforcing" anything. So the messages are
> basically informing you that you WILL have problems IF you enable enforcing
> mode.
> Checking AppDynamic PHP agent it does not support SELinux (which is
> insanely poor for the license cost!) so best you can do is ignore the
> messages. It may be better to contact their support channels for help too
> rather then here if you need any more.
> Disabling SELinux completely should stop the messages appearing
> completely, though I advise against anything but enforcing mode



OK thanks. That makes complete sense. I do plan on enabling SELinux
enforcing mode soon! And I find it more than a little surprising that the
appdynamics php agent won't support SELinux. I'll have to bring this up to
them, we have a pretty big account with them.

Thanks!
Tim

On Tue, May 12, 2015 at 1:47 AM, Jason Woods <devel at jasonwoods.me.uk> wrote:

>
> > On 12 May 2015, at 03:39, Tim Dunphy <bluethundr at gmail.com> wrote:
> >                                    *****  Plugin catchall_labels (83.8
> > confidence) suggests   *******************...
> > May 11 22:31:38 web1 python[14832]: SELinux is preventing
> > /usr/lib/appdynamics-php5/proxy/jre/bin/java from block_suspend access on
> > the capability2 Unknown.
>
> > Why is that odd? Well mainly because I have SELinux off at the moment.
> >
> > [root at web1:~] #getenforce 0
> > Permissive
>
> This means SELinux is ON in a kind of testing mode. It is only reporting
> what would be blocked and not "enforcing" anything. So the messages are
> basically informing you that you WILL have problems IF you enable enforcing
> mode.
>
> Checking AppDynamic PHP agent it does not support SELinux (which is
> insanely poor for the license cost!) so best you can do is ignore the
> messages. It may be better to contact their support channels for help too
> rather then here if you need any more.
>
> Disabling SELinux completely should stop the messages appearing
> completely, though I advise against anything but enforcing mode.
>
> Jason
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
GPG me!!

gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B