sh: /bin/traceroute: Permission denied Cannot execute script on Zabbix Front End GUI

[SaptariWijayaMulia]

Hello all

does anybody knows or familiar about this error message on Zabbix 4.4.5 fron end GUI ?

• sh: /bin/traceroute: Permission denied
• Cannot execute script
• /bin/traceroute 127.0.0.1

this problably because Selinux is enforcing, if I set it permissive there is no issue
but I just want to know if we can resolved this without disable Selinux itself

[tim.mooney]

If you're going to run with SELinux set to "enforcing", you'll need to become familiar with how you use selinux commands to adjust its permissions and how you do things like grant a particular user the ability to execute commands labeled with a particular context. Because different monitoring environments have very different needs, it may be necessary to "customize" what Zabbix can execute or access (ports or files).

I haven't checked the documentation, but are you certain that Zabbix supports being run in an SELinux environment?

It looks like you might be able to use

semanage permissive -a traceroute_t

on your Zabbix server to allow anything tagged with the traceroute_t label to be in "permissive" mode. This doesn't completely disable "enforcing", but it does disable it for everything labeled with traceroute_t. That may not be what you want, and there may be a better way.

[SaptariWijayaMulia]

thank you tim.mooney

the problem solved with
# semanage permissive -a zabbix_t

now i can detect os, traceroute, and ping from default zabbix gui script with the entire selinux enforcing mode

[kronicklez]

Hi,

If i'm use the zabbix appliances, may i know how do i can disable selinux so i can enable troceroute?

Thanks and appreciate any feedback