zabbix_agent on centos7, want to run without disbaling selinux

[bisana]

Hi All,
I am trying to run zabbix-client on centOS7.
I have selinux enabled on the system and I do not want to diable it for running zabbix-agent

I have done the firewall settings for CentOS 7
as
[

firewall-cmd --permanent --add-port=10051/tcp
firewall-cmd --permanent --add-port=10050/tcp

other than this, what else should I do to make the zabbix client running on centoOS, without disbaling selinux
Guidance and advice requested
thanks
Joseph John

[Ales Ulrych]

Hi All,
I am trying to run zabbix-client on centOS7.
I have selinux enabled on the system and I do not want to diable it for running zabbix-agent

I have done the firewall settings for CentOS 7
as
[
other than this, what else should I do to make the zabbix client running on centoOS, without disbaling selinux
Guidance and advice requested
thanks
Joseph John

Hi,

I have Zabbix agent on CentOS 7 with Permissive term after every reboot.
How about try this:
sudo iptables -I INPUT -p tcp --dport 10050 -j ACCEPT
sudo iptables -I INPUT -p tcp --dport 10051 -j ACCEPT

Ales

[jan.garaj]

It depends what your agent needs to monitoring. For example Docker monitoring with C module - https://github.com/monitoringartist/...toring#selinux

See also general zabbix selinux troubleshooting: https://www.slideshare.net/Zabbix/pa...rdening-zabbix