cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Highlighted

SNMP Confiuration Error

Below is my snmp config file for all my systems

#######################################################
sysLocation
sysContact
sysServices 72

rocommunity

trapcommunity
trap2sink

linkUpDownNotifications yes
defaultMonitors yes
dontPrintUnits true
includeAllDisks 10%
#######################################################

last week I started seeing my var directory growing when I checked my log files I get the following error

[root@gp60 ~]# tail /var/log/messages
Jan 31 13:49:00 gp60 kernel: audit(1328017738.673:6186949): avc:  denied  { getattr } for  pid=19832 comm="snmpd" name="/" dev=dm-3 ino=2 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:tmp_t tclass=dir
Jan 31 13:49:00 gp60 kernel: audit(1328017738.674:6186950): avc:  denied  { getattr } for  pid=19832 comm="snmpd" name="tmp" dev=dm-5 ino=32769 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:tmp_t tclass=dir
Jan 31 13:49:00 gp60 kernel: audit(1328017738.674:6186951): avc:  denied  { read } for  pid=19832 comm="snmpd" name="tmp" dev=dm-4 ino=12 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:usr_t tclass=lnk_file
Jan 31 13:49:00 gp60 kernel: audit(1328017738.674:6186952): avc:  denied  { getattr } for  pid=19832 comm="snmpd" name="/" dev=dm-3 ino=2 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:tmp_t tclass=dir
Jan 31 13:49:00 gp60 kernel: audit(1328017738.678:6186953): avc:  denied  { getattr } for  pid=19832 comm="snmpd" name="/" dev=dm-1 ino=2 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:file_t tclass=dir
Jan 31 13:49:00 gp60 kernel: audit(1328017738.678:6186954): avc:  denied  { getattr } for  pid=19832 comm="snmpd" name="/" dev=dm-3 ino=2 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:tmp_t tclass=dir
Jan 31 13:49:00 gp60 kernel: audit(1328017738.679:6186955): avc:  denied  { search } for  pid=19832 comm="snmpd" name="mnt" dev=dm-0 ino=145154 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:mnt_t tclass=dir

Any Idea what to do?

Note: Its only happening on my Rhel4 systems.

0 Kudos
3 Replies
Highlighted
Level 11

Re: SNMP Confiuration Error

Pardon if I offend, but did you edit IPTables? Did this configuration work before? Have you tried restarting the SNMPD service?

0 Kudos
Highlighted

Re: SNMP Confiuration Error

not at all. here are all the steps have taking

Restarted snmpd

check iptables to make sure it allows 161 tcp and udp

0 Kudos
Highlighted
Level 11

Re: SNMP Confiuration Error

You might need to setup a SELinux policy module for SNMP.

Check this link out... http://magazine.redhat.com/2007/08/21/a-step-by-step-guide-to-building-a-new-selinux-policy-module/.

0 Kudos