permission denied in custom.vfs.dev.discovery

[ik_zelf]

Hi,
in the agent log with DebugLevel=4:
3220:20150305:123732.480 listener #3 [processing request]
3220:20150305:123732.480 Requested [custom.vfs.dev.discovery]
3220:20150305:123732.480 In zbx_popen() command:'/opt/zabbix/linux/queryDisks.pl'
3220:20150305:123732.481 End of zbx_popen():8
3254:20150305:123732.482 zbx_popen(): executing script
3220:20150305:123732.485 In zbx_waitpid()
3220:20150305:123732.485 zbx_waitpid() exited, status:126
3220:20150305:123732.485 End of zbx_waitpid():3254
3220:20150305:123732.485 EXECUTE_STR() command:'/opt/zabbix/linux/queryDisks.pl' len:54 cmd_result:'sh: /opt/zabbix/linu'
3220:20150305:123732.485 Sending back [sh: /opt/zabbix/linux/queryDisks.pl: Permission denied]
3220:20150305:123732.485 listener #3 [waiting for connection]

-rwxr-xr-x. 1 zabbix zabbix 1210 Mar 5 08:46 /opt/zabbix/linux/queryDisks.pl
-rwxr-xr-x. 1 root root 249392 Feb 25 02:54 /usr/sbin/zabbix_agent
-rwxr-xr-x. 1 root root 297720 Feb 25 02:54 /usr/sbin/zabbix_agentd

Linux 2.6.32-431.29.2.el6.x86_64
zabbix 2.4.4

I followed Monitoring disk I/O using Zabbix
I got it working on one host, not on this one. I am running out of ideas how to debug this.

sudo -u zabbix /opt/zabbix/linux/queryDisks.pl is giving a clean json output.

BTW: in the GUI the error for this discovery rule is 'Value should be a JSON object', in an other rule (Template OS Linux: Network interface discovery) I get status not supported with "Cannot open /proc/net/dev: [13] Permission denied" in the error icon's description.

Who can supply me some pointers of what to check?
thanks,
Ronald.

[ingus.vilnis]

Hi Ronald,

It is possible that SELinux is in your way.
Please have a look at /var/log/audit/audit.log and see if you seen any lines related Zabbix and /opt/zabbix/linux/queryDisks.pl

Also you can try to temporary disable SELinux at all and see if it helps.

Best Regards,
Ingus

[ik_zelf]

bingo

Yes,
that was right between the eyes. Thanks for the tip.

Here Troubleshooting SELinux a nice pointer how to fix selinux problems, other than just disabling it.

Thanks Ingus!