Updates on zabbix service
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest1 of 7 patches 0 repliesNew
1 of 7 patches is in this archive. The cover letter announces 7.
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 7/7 | Allow zabbix agent to query system state and other monitorable aspects | +0 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [refpolicy] [PATCH 0/7] Updates on zabbix service
Quoted 7 lines · Sven Vermeulen
Zabbix is an open-source/free software monitoring solution. A module already exists in the refpolicy, but does not work properly. Also, the module does not support a different domain for the agents (zabbix agents) although this is greatly preferred.
The following set of patches introduce the following to this module set:
Quoted 14 lines
1. Zabbix server is a multi-process system requiring signals to be sent and (exclusive) locks to be taken where needed (for instance used with logging)
2. Zabbix servers use posix shared memory (using tmpfs backend), so create azabbix_tmpfs_tdomain and allow the server access to manage it
3. Zabbix uses a dedicated port (10051) for its server. Allow the servers to bind to it, and of course define it as a specific port in SELinux
4. Start with the definition of thezabbix_agent_tdomain
5. Allowzabbix_agentto bind on its own port (10050) and connect to the zabbix server (for the regular metric submissions)
6. The zabbix server also needs to connect to the agent (for what Zabbix calls "active monitoring")
7. Givezabbix_agent_tthe privileges it needs to scan the system (get system state, read files, check services, ...)
Merged. In the future, when you revise a patch set, please resend the entire set. Then I know for sure I have all of the up-to-date patches, rather than digging through the replies for the right patch.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com