Ryan Armstrong
Ryan Armstrong
I'm interested to hear if you have solved this problem in an interesting way. You shouldn't need any additional agents, but you may need to duplicate the template. A single...
Thanks for posting this issue. I agree the policy should probably be included with the Zabbix agent, not this module. I'll have a play around with it and maybe raise...
I observed the same in trying to replicate the issue. Unfortunately the zabbix_agent_t context is actually deployed as part of the `selinux-policy-targeted` package (the CentOS default targeted policy) and is...
I couldn't find the package maintainers for `selinux-policy-targeted` so I've escalated to Zabbix in [ZBX-10610](https://support.zabbix.com/browse/ZBX-10610).
@robbrucks suggested the following via email: ``` module zabbix_agent_pg 1.0; require { type postgresql_var_run_t; type zabbix_agent_t; class sock_file write; } #============= zabbix_agent_t ============== allow zabbix_agent_t postgresql_var_run_t:sock_file write; ```
When the module does 'wide' discovery of tables and indexes across multiple databases, it has to establish a new connection for each discovered database. This is a limitation of PostgreSQL....
You might consider enabling debug logging in Zabbix to get a more detailed picture. It's incredibly verbose, but should contain the specifics you need.
Thanks, I'll take a closer look. It is odd, as template dbs should be excluded for you already. What version of PostgreSQL are you running?
Agreed. I just haven't found any file host which would provide nice download statistics and a badge/hit counter for the Github page. Any recommendations?
@jangaraj that sounds perfect. Count me in for your community repo. Thanks very much.