Agent active file i/o problem

[LenR]

I wrote a simple test to catch linux filesystem that has gone R/O, using an active test:

UserParameter=lcl.filesysro,touch /var/log/zabbix/filesysro; echo $?

This works on many systems, but fails on 4 with permission errors. I don't understand, since the zabbix agent can write to it's logs.

Any ideas?

[richlv]

it probably can write to individual files, but not to the /var/log/zabbix directory.
or there's some solution (grsecurity, selinux, apparmor) imposing additional restrictions