[icinga-users] Icinga2: How to ignore: "/sys/kernel/security is not accessible: Permission denied"

Gunnar Beutner Gunnar.Beutner at netways.de
Tue Oct 13 11:56:38 CEST 2015


FWIW the default value for disk_exclude_type is already [ "none", "tmpfs", "sysfs", "proc", "devtmpfs", "devfs", "mtmfs“ ].

I just installed a Debian jessie VM and I’ve tried to manually run check_disk on a shell (as ‚nobody‘) which seems to be working just fine here:

root at debian:~# su -s /bin/bash nobody
nobody at debian:/root$ /usr/lib/nagios/plugins/check_disk -w 80% -c 90%
DISK OK - free space: / 17106 MB (94% inode=96%); /dev 10 MB (100% inode=99%); /run 91 MB (95% inode=99%); /dev/shm 240 MB (100% inode=99%); /run/lock 5 MB (100% inode=99%); /sys/fs/cgroup 240 MB (100% inode=99%);| /=1058MB;3831;1915;0;19160 /dev=0MB;1;0;0;10 /run=4MB;19;9;0;96 /dev/shm=0MB;47;23;0;240 /run/lock=0MB;0;0;0;5 /sys/fs/cgroup=0MB;47;23;0;240
nobody at debian:/root$


Kind regards,
Gunnar Beutner




On 13/10/15 11:16, "icinga-users on behalf of Aaron Hastings" <icinga-users-bounces at lists.icinga.org on behalf of aaron.hastings11 at gmail.com> wrote:

>Sorry to bump this, but I see there's a good bit of activity recently and this is a really simple, but aggravating, issue that I cannot seem to resolve.
>
>
>Many thanks,
>
>Aaron
>
>
>On Sat, Oct 3, 2015 at 8:02 PM, Aaron Hastings
><aaron.hastings11 at gmail.com> wrote:
>
>Hmmm... I probably shouldn't have sent that in HTML format. Plain text
>version below:
>
>Hi all,
>
>I've been using Icinga2 for about a year now but consistently run into
>this issue with Debian 8 jessie hosts.
>
>My disk checks keep giving me back critical errors, specifically the two
>below:
>
>    DISK CRITICAL - /sys/kernel/security is not accessible: Permission
>denied
>    DISK CRITICAL - /sys/kernel/config is not accessible: Permission denied
>
>I'm not sure why this is, since both directories (filesystems?) are 644
>in permissions and I'm obviously not running any sort of mandatory
>access control (i.e. SELinux or AppArmor). Even umounting these
>filesystems makes no difference.
>
>I've even tried adding the following to my hosts.conf file with no effect:
>
>    vars.disk_exclude_type = ["sysfs"]
>
>I've posted a full Host entry (sensitive fields redacted) for my
>hosts.conf file below:
>
>object Host "host.example.com <http://host.example.com>" {
>  import "generic-host"
>
>  address = "1.2.3.4"
>
>  enable_flapping = true
>
>  vars.remote_client = "host.example.com <http://host.example.com>"
>
>  vars.os = "Linux"
>  vars.os_name = "Debian"
>  vars.os_family = "Debian"
>  vars.os_release = "8"
>  vars.os_codename = "jessie"
>
>  vars.disks["disk"] = {}
>  vars.disks["disk /"] = {
>    disk_partitions = "/"
>  }
>  vars.disk_exclude_type = ["sysfs"]
>
>  vars.notification["mail"] = {
>    groups = [ "icingaadmins" ]
>  }
>}
>
>Any insight or help with this would be greatly appreciated. Please let
>me know if you require additional information.
>
>Many thanks,
>Aaron
>
>
>
>
>
>
>

-- 
Gunnar Beutner
Senior Developer

NETWAYS GmbH | Deutschherrnstr. 15-19 | D-90429 Nuernberg
Tel: +49 911 92885-0 | Fax: +49 911 92885-77
GF: Julian Hein, Bernd Erk | AG Nuernberg HRB18461
http://www.netways.de | Gunnar.Beutner at netways.de

** OSMC 2015 - November - netways.de/osmc **
** OSDC 2016 - April – netways.de/osdc **


More information about the icinga-users mailing list