3306747 - Setroubleshoot logs in the messages file with SELinux in permissive mode

Symptom

In the OS log /var/log/messages, setroubleshoot reports blocked actions, even when SELinux is already in permissive mode.

For example:

Jan 1 12:18:00 hostname setroubleshoot[123456]: failed to retrieve rpm info for /usr/sap/hostctrl/exe/sapcimb
Jan 1 12:18:00 hostname setroubleshoot[123456]: SELinux is preventing /usr/sap/hostctrl/exe/sapcimb from connect access...
Jan 1 12:18:00 hostname setroubleshoot[123456]: SELinux is preventing /usr/sap/hostctrl/exe/sapcimb from connect access...
Jan 1 12:18:02 hostname setroubleshoot[123456]: failed to retrieve rpm info for /usr/sap/DAA/SMDA98/exe/sapstartsrv
Jan 1 12:18:02 hostname setroubleshoot[123456]: failed to retrieve rpm info for /usr/sap/DAA/SMDA98/work/available.log

Environment

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Product

SAP NetWeaver all versions ; SAP S/4HANA all versions

Keywords

RHEL, Red Hat, SELinux, setroubleshoot , KBA , BC-OP-LNX , Linux , BC-OP-LNX-RH , Red Hat Linux , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.