Azure / Azure/azure-linux-extensions

SELinux and DSC

Open
#115 0 comments 0 reactions 0 assignees View on GitHub
extensions/DSC
Dominant language
Python
Stars
333
Forks
278
Avg merge
2d 9h
Merged PRs (30d)
4

Description

Hi

I am noticing errors in the cron log for what seems to be the consistencyinvoker script with SELinux, which would make sense why I am not seeing the regular consistency checks show up via Azure Automation. I am using RHEL 7.2

```
Apr 4 18:39:01 localhost crond[4736]: (*system*) RELOAD (/etc/crontab)
Apr 4 18:39:01 localhost crond[4736]: ((null)) Unauthorized SELinux context=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 file_context=system_u:object_r:etc_t:s0 (/etc/crontab)
Apr 4 18:39:01 localhost crond[4736]: (root) FAILED (loading cron table)
Apr 4 18:40:01 localhost crond[4736]: (*system*) RELOAD (/etc/crontab)
Apr 4 18:40:01 localhost crond[4736]: ((null)) Unauthorized SELinux context=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 file_context=system_u:object_r:etc_t:s0 (/etc/crontab)
Apr 4 18:40:01 localhost crond[4736]: (root) FAILED (loading cron table)

[root@shorroshvm cron.d]# cat /etc/crontab
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root

# For details see man 4 crontabs

# Example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed

*/30 * * * * root /opt/omi/bin/ConsistencyInvoker
```

I have installed the DSC linux via the register mode on the extension, is there some extra configuration required to get selinux and DSC to play properly? I was hoping that this would be built in to the extension script.

Thanks
Matt

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.